International Business Machines Corporation

Other

Trend Micro Inc.

Globalfoundries Inc.

Lenovo (singapore) Pte. Ltd.

Nuance Communications, Inc.

Lenovo Limited

Shawn Patrick Mullen

Gerald Francis McBrearty

Jessica Kelley Murillo

Johnny Meng-Han Shieh

Susann Marie Keohane

Johnny Menh-Han Shieh

Denise Marie Genty

James Stanley Tesauro

Itzhack Goldberg

Rick A Hamilton, Ii

Neil Sondhi

Harry R McGregor

Christopher B Moore

Elvin Dalipe Tubillara

Clifford A Pickover

William Alton Fiveash

Ramachandran Unnikrishnan

Bhargavi Bheemreddy Reddy

Gerald Francis Mcbrearty

Ravi Shankar

Neal Richard Marion

Guha Prasad Venkataraman

Karen Mariela Siles

William Christopher Conklin

Nithya Alagu Renganathan

Jenny S Li

Jeffrey Robert Hoy

Vinit Jain

George Francis Ramsay, Iii

Tristan Anthony Brown

Jacqueline Hegedus Wilson

Robert B Gordon

Jeffrey J Feng

Manjunath A Pattanshetti

Hussaina Nandyala Begum

Scott Allen Carroll

Susann Marie Koehane

Fabio A Gomez Diaz

Megan L Bennett

Eric S Angeles

Fernando J Diaz

Susan Marie Keohane

Ufuk Celikkan

Jessica C Murillo

Alan Hayward

Terry J Hoffman

Jessica Carol Murillo

Venkat Venkatsubra

James P Allen

Rakesh Sharma

John Maddalozzo, Jr

Neeta Garimella

Gerald James Tesauro

James William Walker

Michael Paul Cyr

David Haikney

Dolapo Martin Falola

David Richard Marquardt

Thomas V Weaver

Arthur James Tysor

Edward Shvartsman

Tommy Lucas McLane

Alexei Kojenov

Kevin Lynn Fought

Satya Prakesh Sharma

Michael J McGowan

Matthew Slade Cronk

Michael William Wortman

John Viksne

Jyoti Basavaraj Tenginakai

Thomas Van Weaver

Michael Perng

Shawn L Berger

Bradley O Simpson

Denise M Gentry

Anton Aleksandrov

Zsolt Ádám Czinege

Corinne Anne Leopold

George F Ramsay, Ii

Aaron D Angert

Sharon M Gordon

Guja Prasad Venkataraman

Ramalingeswar Pandiri

Ramachandran Unniksrishnan

Christopher Ray Ingram

Shannon Marie MacAlpine

Venkat Vankatsubra

Christopher N Solis

Zachary R Sais

Navneet Gupta

Jessica Murillo

A method for establishing an index of usability associated with a replacement payment card is provided. The method may include receiving a payment card replacement request in a vending facility. The method may further include identifying at least one possible risk factor associated with a user utilizing the replacement payment card. The method may also include creating a risk assessment based on the at least one identified possible risk factor. The method may further include establishing an index of usability for the replacement payment card based on the created assessment, whereby a value of the index of usability correlates to a plurality of restrictions placed on using the replacement payment card. The method may also include storing the established index of usability in a database.

Index of usability for a replacement payment card

A method performs a trust review of repositories is provided. A computer system identifies security criteria for the trust review. The computer system applies the security criteria on a repository under evaluation. The computer system determines a recommendation for the repository under evaluation using a comparison of a result of applying the security criteria on the repository under evaluation to a trust baseline for a set of trusted repositories. According to other illustrative embodiments, a trust system and a computer program product for performing a trust review are provided.

Trusted repository review

Authentication of tokens and associated are used to provide a just-in-time key synchronization for user access to a service in a cloud computing environment which includes a plurality of availability zones with an identity service, a storage system, and a keystore. The encryption keys are distributed by the storage system based on a user access request containing a token with a payload and a current user cryptographic key. The token is then sent to the keystore to authenticate the user. The keystore authenticates the user and sends the token with the current cryptographic key to the storage system. The storage system receives the token with the current cryptographic key and grants access to the user for the service.

Distributed encryption keys for tokens in a cloud environment

A encrypted verification system and method includes detecting an attempt to access a service requiring multi-factor authentication from a first user computing device, requesting a trusted platform module (TPM) public key of a second user computing device, the second user computing device being coupled to the first user computing device, generating a nonce in response to receiving the TPM public key of the second user computing device, sending the nonce for signature by a TPM private key of the second user computing device, receiving a signed nonce, wherein the signed nonce is signed by the TPM private key and decrypted using the TPM public key of the second user computing device, and determining that a value of the signed nonce matches a value of the nonce to authenticate the first user computing device and allowing access to the service.

Automating verification using secure encrypted phone verification

Virtual machine volumes may be migrated between software defined storage (SDS) systems by an orchestration engine configured to manage one or more virtual machines. The orchestration engine may identify one or more volumes associated with the one or more virtual machines and resident in a first SDS system to migrate to a second SDS system, and for each identified volume among the one or more identified volumes, the orchestration engine may create a replacement volume for the identified volume on the second SDS system, map the replacement volume to the associated virtual machine for the identified volume, cause the associated virtual machine to discover the replacement volume, mirror data from the identified volume to the replacement volume, unmap the identified volume from the associated virtual machine, and delete the identified volume from the first SDS system.

Virtual machine migration between software defined storage systems

Coordination of rate limiting calculations and updates, for multiple interrelated services, at a single computer at a single logical location on a computer network, instead of coordinating rate limit calculations by direct data communications among and between the various machines hosting the interrelated services that are subject to rate limiting. In some of these embodiments, advantages to doing this may include: (i) reducing the number and/or bandwidth consumption of data communications needed to perform rate limiting calculations and determinations; and/or (ii) setting appropriate rate limits for only the 'highest level' services (that is, the services that are initially called by users, as opposed to the services that the highest level service call (directly or indirectly)).

Centralized rate limiters for services in cloud based computing environments

Environmental data, associated with a first computer, is received. Social media data, associated with the first computer, is also received. A first severity value, based on the environmental data, is determined. A second severity value, based on the social media data, is determined. A first weighted severity score is determined. The first weighted severity score is a combination of the first and second severity values. One or more actions is determined. The determined action is one of a recovery point objective action or a recovery time objective action. Each action has a threshold. Whether the first weighted severity score is equal to or greater than any threshold associated with any action is determined. In response to determining that the first weighted severity score is equal to or greater than one or more thresholds, each action associated with each threshold is implemented.

Predictive disaster recovery system

A method for sequencing virtual machines in a shared pool of configurable network computing resources includes sequencing at least one computing element for two or more virtual machines into a respective two or more profiles, stored in a security database. Each virtual machine corresponds to a respective profile. The method also includes comparing a profile of a virtual machine corresponding to a security incident in the shared pool of configurable network computing resources with respective profiles of other virtual machines to identify similar profiles and group profiles into first and second groups. The method also includes comparing profiles of the groups of virtual machines and determining an alteration plan based on the comparison of profiles of the groups. The alternation plan includes a plan to modify one or more computing elements for virtual machines in the first group of virtual machines to reduce likelihood of susceptibility to the security incident.

Sequencing virtual machines

A sender selection is detected at a sender computer system within a user interface of at least one suggested folder name for a composed electronic message for a recipient receiving the electronic message to select as a folder name for filing the electronic message. The at least one suggested folder name is attached to the electronic message at the sender computer system for distribution to the recipient. The electronic message is sent with the suggested filing folder name from the sender computer system to a recipient, wherein a recipient receiving the electronic message receives the at least one suggested folder name specified by the sender in the electronic message for selecting a folder for filing the electronic message in a messaging filing directory for the recipient.

Automated electronic message filing system

A method for determining a password strength is provided. The method may include receiving a user-entered password. The method may also include identifying a keyboard layout type associated with a keyboard utilized to enter the received user-entered password. The method may further include mapping each character within a plurality of characters in the received user-entered password to a corresponding location on a grid associated with the identified keyboard layout type. The method may also include determining a coordinate sequence associated with the received user-entered password based on the mapped plurality of characters. The method may further include applying a pattern recognition algorithm to the determined coordinate sequence. The method may also include determining a password strength based on the applied pattern recognition algorithm.

Cognitive password pattern checker to enforce stronger, unrepeatable passwords

An Attestation Identity Key pair (AIK pair) is created from a hardware identifier of a hardware machine and a geographical location. the AIK pair includes a private AIK and a public AIK. The public AIK and the geographical location are stored in a repository. the public AIK is matched with a key used to sign a data request. A geographical restriction policy corresponding to the geographical location associated with the public AIK is executed. When the geographical restriction policy determines that a type of the data request corresponds to an authorized request type from the geographical location, a service is instructed to process the data request.

Enforcing locational restrictions on stateless transactions

A system for transferring digital rights managed (DRM) files from a first seller device to a buyer device involves a buyer device configured to receive a file package having the DRM file. Some file packages may also have a DRM file access key. The system also has a first seller device having the DRM file stored thereon and configured to receive a request to purchase the DRM file (the request having a DRM file identifier); receive a buyer identifier associated with the request; transfer the file package to a buyer device to the buyer device; detect through a network connection, a digital rights management server; and send, responsive to detecting the digital rights management server, a sale record to the digital rights management server, where the sale record includes the DRM file identifier and the buyer identifier.

Distributed digital rights-managed file transfer and access control

Growing community of inventors

Buda, TX, United States of America

Shawn Patrick Mullen