International Business Machines Corporation

Rick M F Wu

Cheng-Ta Lee

Li-Ju Chen

John J Y Hsu

Bor-Ping Pan

Ming-Hsun Wu

Wei-Shiau Suen

Wei-Hsiang Hsiung

Kaifu Wu

Joey H Y Tseng

Sheng-Tung Hsu

Chih-Wen Chao

Gregory Lyle Galloway

Sheng Hao Wang

Sridhar R Muppidi

Jeffrey C H Liu

Rebecca L J Chen

Ya Hsuan Tsai

Yuan-Shyang Lee

Cecelia Y C Yu

Yu-Jin Chen

Kang Liang Liu

Kay Lin

A method of Webpage navigation can include a computer device loading a Webpage having at least a first portion and a second portion, arranging the Webpage in order to present the first portion in the display area of the computer device and to place the second portion out of the display area, and presenting a navigation map corresponding to the Webpage in the display area. In response to a control command input with respect to the navigation map, the Webpage can be arranged in order to present the second portion in the display area.

Facilitating navigation of a webpage on a computer device

Disclosed is a method of customizing an appliance. The method includes steps of pre-storing a public key in the appliance; connecting the appliance to an external storage device; and booting up the appliance to automatically proceed with the following customization process: obtaining a customization file from the external storage device; authenticating the customization file with the public key; and executing customization with the customization file if the authentication succeeds.

Managing the customizing of appliances

A first client encryption initiation is intercepted from a client. The first client encryption initiation is intended for a server. Based on the first client encryption initiation, a second client encryption initiation is initiated with the server. Receiving a server response from the server responsive to the initiated second client encryption initiation. A first secure connection is negotiated with the client. The first secure connection is based on the intercepted first client encryption initiation and based on the server response. A session key to perform secure communication with the client is obtained from the first secure connection. A second secure connection is established with the server. The second secure connection is based on the server response and the session key.

Synchronizing secure session keys

A method for monitoring encrypted communication sessions between computing devices includes intercepting messages of a handshaking procedure between a client and a server device, the handshaking procedure establishing an encrypted communication session between the client and server. The method further includes determining, from the messages, a session context for the encrypted session and an identifier associated with the session context. The method further includes storing the session context in a database indexed by the identifier. The method further includes intercepting, subsequent to the storing, second messages of a second handshaking procedure between the client and a second server device, the where second handshaking procedure resumes the encrypted communication session after an interruption. The method additionally includes determining that the second messages includes the identifier associated with the session context, retrieving, from the database, the session context using the identifier, and monitoring the resumed encrypted communication session using the session context.

Monitoring encrypted communication sessions

Embodiments of the present invention provide systems and methods for exchanging information. Communications between an intrusion prevention system (IPS) and at least one end-point are facilitated by controlling network traffic flow in an IPS and the at least one end-point and formation of an information plane. The formed information plane allows attributes of the IPS and the at least one end-point to reside in the formed information plane. A network access policy (NAP) works in conjunction with an IPS and leverages created customized network objects (CNOs). Upon analyzing data packets, the data packets may or may not be forwarded to the IPS.

Dynamic tuple for intrusion prevention systems

An appliance, user information device, method, and computer program product for collaborating with resources residing in multiple information devices. The user information device may communicate with the appliance, and the appliance may further communicate with a first assisting device, wherein the first assisting device has access to a first resource capable of performing a first operation. The user information device includes a device communication interface, a processor configured to execute at least one application, the at least one application configured to generate a first command associated with the first operation via the processor, and a resource agent program executable by the processor, the resource agent program configured to send the first command to the appliance via the device communication interface, the first command operable for enabling performance of the first operation using the first resource when the appliance sends the first command to the first assisting device.

Collaborating with resources residing in multiple information devices

A method for preventing network attacks on baseboard management controllers. The method includes receiving, by the network controller, a packet from a computer networking device on a computer network, where the packet is destined for a baseboard management controller (BMC); determining, by the network controller, whether the packet contains a tag identifying that the packet has been determined to be free of suspicious or malicious traffic; on condition that the packet has been determined to not contain the tag, sending the packet to a network inspection module, by the network controller, to be inspected for suspicious or malicious traffic; and on condition that the packet has been determined to contain the tag, sending the packet to the BMC by the network controller using a side band interface.

Preventing network attacks on baseboard management controllers

Triggering an event of interest in a mobile device based on communications established with nearby wireless devices can include receiving a challenge of the event of interest; obtaining a corresponding expression of a combination key with reference to the event in response to the challenge; receiving an identified data of the wireless devices in the vicinity of the mobile device; comparing the identified data with the expression to determine if the expression is a true value; and executing the event of interest in response to the true value.

Method, mobile device and computer program product for triggering an event of interest based on communications established with nearby wireless devices

A processor-implemented method provides a remote diagnosis for an information appliance via a secure connection. A command is received from a console, and an examination is performed to determine whether or not the command is permitted to be issued. In response to a remote diagnostic module being initiated, a determination is made as to whether a secure connection to a remote information appliance has been created. In response to determining that the secure connection to the remote information appliance has been created, the command is transmitted to the remote information appliance via the secure connection.

Providing a remote diagnosis for an information appliance via a secure connection

A session of network communications is processed between a client terminal and a server by intercepting a request generated from a network transport unit of the client terminal, generating an intermediate session ID for the client terminal, asking the server to establish a session, receiving a response sent from the server using a server session ID after the session is established, associating the server session ID with the intermediate session ID and sending the response to the network transport unit using the intermediate session ID.

Growing community of inventors

Taipei, Taiwan

Rick M F Wu