International Business Machines Corporation

Roee Shlomo

Ronen Itshak Kat

Sima Nadler

Tomer Solomon

Michael Edward Factor

Ety Khaitzin

Paula Kim Ta-Shma

Ziv Nevo

Karen Frida Yorav

Shlomit Koyfman

Arik Rinberg

Maya Anderson

An example system includes a processor to generate a data plane based on dataset metadata, data plane component metadata, data governance decisions, and information technology (IT) system metrics. The processor is to also apply components of the data plane for a specified workload across a number of computing devices selected by a control plane.

Generating data planes for processing of data workloads

Embodiments of the present systems and methods may provide a data access approval process that supports complex and fine-grained policies and can be applied to different data items at scale, which provides improvement over current technologies. For example, in an embodiment, a computer-implemented method for controlling access to data by computer systems may comprise generating an intermediate representation by integrating a combination of data access policies, data attributes including attributes per data subject, and the data itself to form the intermediate representation, receiving a request for access to the data, rewriting the request for access to the data to incorporate the intermediate representation so as to provide access only to data allowed by the policies integrated into the intermediate representation, and executing the rewritten request and providing only data allowed by the policies integrated into the intermediate representation.

Fine-grained privacy enforcement and policy-based data access control at scale

An example system includes a processor to receive deltas corresponding to concurrently executed operations of a number of other replicas on an element of a delta-based conflict free replicated data type (CRDT) array of a distributed computing system. The processor is to modify, at the first replica, the element of the delta-based CRDT array based on the deltas using a dot store that maps dots to a dot store.

Delta-based conflict-free replicated data type arrays using dot stores that map dots to dot stores

A method, product and system including obtaining metadata associated with at least one plugin of a runtime environment, wherein the runtime environment is configured to provide a service to a client, wherein the plugin is configured to measure or enforce metrics of the service; obtaining user selections regarding the metrics, wherein the user selections comprise constraints on the runtime environment; obtaining, based on the metadata of the plugin and based on the user selections, corresponding clauses textually describing the constraints; generating a contract, wherein the contract comprises the corresponding clauses; automatically generating a configuration file based on the user selections; and automatically enforcing the contract by: activating the runtime environment, loading the service in the runtime environment, configuring the plugin according to the configuration file, executing the plugin to identify a violation of the contract, and executing a client function of the client.

Enforceable contract generation

Growing community of inventors

Petah Tikva, Israel

Roee Shlomo