International Business Machines Corporation

Roberto Ragusa

Giulia Carnevale

Marco Gianfico

Ciro Ragusa

Marzia E Castellani

Alice Guidotti

Fabrizio Loppini

Alessandra Asaro

Ana Lucia Medina

Paolo Ottaviano

Roberto Guarda

Chiara Conti

Remo Freddi

Marta Breno

Gianluca Gargaro

Fabio Cerri

Marco Imperia

Matteo Rogante

Marco Vettori

Alessandro Rea

Aniello Alessandro Rea

Luigi Pichetti

Claudio Marinelli

Alessandro Donatelli

Francesco Maria Carteri

Leonardo Rosati

Filomena Ferrara

Antonio Bagarolo

Sidharth Ullal

Daniele Morgantini

Marco Martino

Leonardo Modeo

Vittorio Carullo

Pasquale Maria Mascolo Montenero

Emanuele Vercalli

Alessio D'Amico

Gianluca Gigliarelli

Marco Morucci

Marco Mulas

Donatello Carriero

Maria Sbriccoli

Elisabetta Quaranta

Matteo Filippo Corona

Anna Pintus

Gianluca Volpe

Wanda Righi

Massimo Caprinali

Federico Accetta

An embodiment sends, at a first time, from a boundary server to a client system in response to a challenge request, a challenge specifying a computational problem to be solved by the client system, the boundary server specified in a challenge list sent to the client system. An embodiment receives, at a second time, at the boundary server, a challenge response from the client system, the challenge response comprising a solution to the computational problem. An embodiment generates, at the boundary server, a certificate encoding an elapsed time between the first time and the second time, the certificate usable by the client system to prove a location of the client system. An embodiment sends, from the boundary server to the client system, the certificate.

Client-server response time based computer system geolocation

A device and method for displaying security information to a user is provided. The present invention may include a security device configured to display a security information on a display surface. The security information may include at least one component having two images based on a splitting of its representation that are viewable from corresponding angles of view. The images may be fused into the representation of the at least one component by a visual system of the user looking at them at a reading distance causing the eyes of the user to look at the images from the corresponding angles of view. A corresponding method for displaying security information to a user is also provided.

Display of security information based on splitting into images viewable at a certain reading distance

A solution is proposed for controlling access to computing resources. A corresponding method comprises receiving and verifying an access request for accessing the computing resources by a secondary computing environment (isolated from the computing resources). A main computing environment (isolated from the secondary computing environment) detects an indication of a positive result of the verification of the access request; in response thereto, the main computing environment verifies an integrity condition of the secondary computing environment and then authorizes the secondary computing environment to access the computing resources accordingly. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Control of access to computing resources implemented in isolated environments

A solution is proposed for performing authentications. A corresponding method comprises storing a verification string corresponding to applying a one-way function iteratively starting from a secret string. An authentication request is received in association with an authentication string (or more) being generated by applying the one-way function iteratively starting from the secret string for a lower number of times. A result of the authentication request is determined by comparing the verification string with a comparison string being generated by applying the one-way function to the authentication string (or a few times iteratively). Corresponding computer programs and a computer program products for performing the method are also proposed. Moreover, corresponding systems for implementing the method are proposed.

Authentication based on chain of strings generated from secret string

A solution is proposed for deploying software programs. A corresponding method comprises calculating a program security indicator of each software program according to corresponding component security indicators of software components being used by the software program. A computing system (or more) is selected for deploying the software program according to a comparison between the program security indicator and corresponding system security indicators of a plurality of available computing systems. A computer program and a computer program product for performing the method are also proposed. Moreover, a corresponding system is proposed.

Deployment of software programs based on security levels thereof

A system and related method exchange messages under the control of a messaging client. The method comprises splitting a content of a source message into a plurality of fragments defined by corresponding portions of its content associated with different recipients of the message. A plurality of transport messages are generated, each comprising one or more of the fragments associated with the recipients. The transport messages are submitted to a messaging server for causing it to provide the transport messages to corresponding further messaging clients of the recipients for their aggregation. A computer program and a computer program product for performing the method are also provided.

Exchange of messages split into fragments for different recipients on client side

In several aspects of the present invention, a processor receives, from a rule-based intrusion detection system, an intercepted request sent by a hacker. A processor analyzes the intercepted request to determine, in part, a type of service and a type of hacker. A processor builds a first layer of a honeypot maze based on the analyzed intercepted request. A processor simulates the first layer of the honeypot maze to the hacker. A processor iteratively builds additional layers of the honeypot maze based on additional intercepted requests from the hacker.

Dynamic maze honeypot response system

A method includes controlling a shared location. Item identifiers are read from a set of items (pertaining to one or more operators sharing the shared location) reaching a gate of the shared location. A verification request message for the item identifiers is broadcast for receiving corresponding verification response messages from central computing systems of the operators. A passage of the items through the gate is controlled according to the verification response messages. A computer program and a computer program product for performing the method are also proposed. Moreover, a system for implementing the method is proposed.

Controlling locations shared among multiple operators

Aspects of the present invention disclose a method for encoding and transmitting access codes of a network to a computing device that is attempting to access the network. The method includes one or more processors identifying an audio command received by a first computing device. The method further includes generating a sound waveform that includes an access code of an access point, by encoding the access code into the sound waveform. The method further includes defining a sound power level of the sound waveform. The method further includes transmitting the sound waveform. The method further includes determining whether a second computing device receives the access code that is encoded in the sound waveform.

Secure transmittal of wireless local area network access codes

A solution is proposed for sharing secret information for accessing a wireless computing network. A corresponding method for distributing the secret information by a source (computing) device comprises receiving a public key of the a target (computing) device, transmitting a verification token to the target device, receiving an utterance of the verification token and transmitting the secret information encrypted with the public key in response to the utterance of the verification token. A corresponding method for obtaining the secret information by a target (computing) device comprises transmitting a public key of the target device, receiving a verification token, outputting the verification token and receiving the secret information encrypted with the public key in response to an utterance of the verification token. Corresponding computer programs and computer program products are also proposed. Moreover, a source computing device and a target computing device for implementing the methods are proposed.

Sharing of secret information for accessing a wireless computing network

A driving mode decision support for a decision to select a driving mode of driving on at least one road segment is provided to a user of an autonomous vehicle. A driver driving profile of a user is received. Segment information defining the at least one road segment is queried. The segment information includes at least a model driver driving profile associated with the at least one road segment. A driving mode decision support for the user is determined for the at least one road segment based on the driver driving profile of the user and the model driver driving profile. An indication of the driving mode decision support is provided to the user. The driving mode decision support includes a recommended driving mode of driving on the at least one road segment.

Driving mode decision support

A content score value is assigned to a text message for content categories. Context data values relating to the text message and to context categories are collected. A context score value for each context category is determined by comparing the context data values with context data threshold values. A content score value for each content category is determined by comparing the content data values with content data threshold values. A difference factor value is calculated as a square root of a summation over differences between the context score values and the content score values. If the difference factor value is determined to exceed a specified difference factor threshold value, then a confirmation is requested and received. The text message is sent by electronic mail to a receiving address.

Document processing

A method for selective scheduling and deployment of maintenance tasks in cloud computing environments is provided. The method determines a computing environment in which a maintenance task is to be performed. The computing environment has one or more environment characteristics. The method then determines one or more task characteristics for the maintenance task. Based on the one or more environment characteristics and the one or more task characteristics, the method determines a similarity between the maintenance task and one or more historical maintenance tasks. The method generates a completion indicator for the maintenance task based on the similarity between the maintenance task and the one or more historical maintenance tasks. Based on the completion indicator, the method schedules performance of the maintenance task.

Selective scheduling of cloud maintenance tasks

A multiresolution optical code can be encoded. A first set of information and a second set of information to encode in an optical code is received. An optical code that encodes the first set of information in a plurality of dots is generated. Each dot of the plurality of dots is divided into a matrix of a first number of sub-dots by a second number of sub-dots, wherein each of the first number and the second number are integers equal to or greater than three and wherein this dividing creates a set of matrices of sub-dots. The second set of information is encoded in a plurality of the sub-dots of the set of matrices of sub-dots.

Multiresolution optical code

Detecting vibrato bar technique for a string instrument can include analyzing, using a processor, a note signal of the string instrument to detect a selected instrumental technique from a plurality of instrumental techniques, analyzing, using the processor, a noise signal of the string instrument to detect a change in frequency of the noise signal, and generating, using the processor, a vibrato bar event responsive to detecting the selected instrumental technique and the change in frequency of the noise signal.

Detecting vibrato bar technique for string instruments

Growing community of inventors

Rome, Italy

Roberto Ragusa