International Business Machines Corporation

Sheehan Anderson

Gili Mendel

Saurabh Agarwal

Nitin Gaur

Konstantinos Christidis

Anna D Derbakova

Binh Q Nguyen

Richard Lee Kulp

Eric Arthur Bordeau

Rajasimhan Apprameyan Mandayam

Manish Sethi

Jianjun Zhang

Gilli Mendel

Operating conditions of a blockchain configuration may be dynamic and change automatically under certain circumstances. One example method of operation may include one or more of identifying an existing consensus procedure used in an existing blockchain configuration, identifying current metrics associated with the existing blockchain configuration, comparing the current metrics to predefined rules, identifying one or more deviations based on the current metrics being compared to the predefined rules, and changing the existing consensus procedure to a next consensus procedure for a subsequent block in the existing blockchain configuration responsive to identifying the one or more deviations.

Changing an existing blockchain trust configuration

A blockchain may store transactions which should were not intended to be recorded due to inappropriate content or unwanted subject matter submitted by malicious users. A method may also include one or more of identifying a blockchain transaction, processing content of the blockchain transaction to identify prohibited content, and determining whether to approve or disapprove the blockchain transaction based on the content of the blockchain transaction.

Filtering and redacting blockchain transactions

During development of an application, an association between a view of the application and a data service, and rules applicable to the view, can be received. The rules can include an indication of a security role assigned to users who are allowed to access the view and an indication of whether the view is allowed to access the data service based on the security role assigned to the user. Based on the rules applicable to the view, permissions for accessing the data service by the view can be automatically extrapolated. Based on the permissions extrapolated for accessing the data service by the view, a binding credential, configured to be processed to determine whether the view of the application is granted access to data provided by the data service at runtime, can be automatically created. The at least one binding credential can be assigned to the view of the application.

Dynamic permission roles for cloud based applications

One embodiment provides a method for enabling computation of a signature of an information set given change information by storing information in a hierarchical data structure, the method including: utilizing at least one processor to execute computer code that performs the steps of: receiving change information relating to a first node within the hierarchical data structure; accessing a database comprising at least one key, wherein the at least one key comprises a crypto-hash and is assigned to a node within the hierarchical data structure; identifying a node key within the database that is assigned to the first node; computing a node crypto-hash for the first node after modifying the first node using the received change information; modifying the node key based upon the computed node crypto-hash; and updating the database with the modified node key. Other aspects are described and claimed.

Organizing key-value information sets into hierarchical representations for efficient signature computation given change information

Users on a client system access files served by a web application through the Network File System (NFS) protocol using common web authentication mechanisms while still honoring constraints imposed by the application's authorization rules. To this end, the client system is modified to include an NFS server. Following authentication of the NFS server with the web application, NFS-based requests (from a local NFS client) directed to the application are received at the NFS server instead of being sent to the application directly. The NFS server, in turn, maps those requests to the web application preferably using standard HTTP. Because the web application's normal security model is enforced as intended at the web application, the approach enables individual users of the client system to operate under different visibility constraints dictated by the web application. Thus, fine-grained permissions may be enforced at the web application for different users.

Mapping the network file system (NFS) protocol to secure web-based applications

Arrangements described herein relate to determining a quality of a software package. Via linked data, the software package can be linked to at least one test plan and a requirement collection. The software package can be executed in accordance with the test plan using at least one test case. At least one test result of the execution of the software package can be generated. A score can be assigned to the test result and a score can be assigned to the test based at least on the test result. Based at least the scores on assigned to the test result and the test case, a package quality score can be assigned to the software package.

Using linked data to determine package quality

Described is a method, whereby a creator of an asset at an asset management system selects an identifier corresponding to information related to the asset. The information is stored at a target repository. The asset creator is authenticated with the target repository. An authorization token is output to the asset management system for authorizing one or more users to access the information related to the asset.

Methods for governing the disclosure of restricted data

Arrangements described herein relate to determining a quality of a software package. Via linked data, the software package can be linked to at least one test plan and a requirement collection. The software package can be executed in accordance with the test plan using at least one test case. At least one test result of the execution of the software package can be generated. A score can be assigned to the test result and a score can be assigned to the test based at least on the test result. Based at least on the scores assigned to the test result and the test case, a package quality score can be assigned to the software package.

Described is a system, whereby a creator of an asset at an asset management system selects an identifier corresponding to information related to the asset. The information is stored at a target repository. The asset creator is authenticated with the target repository. An authorization token is output to the asset management system for authorizing one or more users to access the information related to the asset.

Growing community of inventors

Morrisville, NC, United States of America

Sheehan Anderson