International Business Machines Corporation

Sima Nadler

Roee Shlomo

Michael Edward Factor

Orna Raz

Ronen Itshak Kat

Dan S Chevion

Abigail Goldsteen

Aya Soffer

Marcel Zalmanovici

Ziv Nevo

Karen Frida Yorav

Vladimir Soroka

Gabi Zodik

Sharon Keidar Barner

Amit Fisher

Tommy Sandbank

Shlomit Koyfman

Omri Fuchs

Ron Sivan

Tomer Solomon

An example system includes a processor to generate a data plane based on dataset metadata, data plane component metadata, data governance decisions, and information technology (IT) system metrics. The processor is to also apply components of the data plane for a specified workload across a number of computing devices selected by a control plane.

Generating data planes for processing of data workloads

A method, product and system including obtaining metadata associated with at least one plugin of a runtime environment, wherein the runtime environment is configured to provide a service to a client, wherein the plugin is configured to measure or enforce metrics of the service; obtaining user selections regarding the metrics, wherein the user selections comprise constraints on the runtime environment; obtaining, based on the metadata of the plugin and based on the user selections, corresponding clauses textually describing the constraints; generating a contract, wherein the contract comprises the corresponding clauses; automatically generating a configuration file based on the user selections; and automatically enforcing the contract by: activating the runtime environment, loading the service in the runtime environment, configuring the plugin according to the configuration file, executing the plugin to identify a violation of the contract, and executing a client function of the client.

Enforceable contract generation

A method, a computerized apparatus and a computer program product for mitigating governance and regulation implications on machine learning. A governance impact assessment is generated for a partial data set generated by applying a data governance enforcement on a data set of instances comprising valuations of a feature vector. The partial data set comprises partial instances each comprising partial feature vectors. The governance impact assessment comprises information about data excluded from the data set. A machine learning model trained based on the partial data set and configured to provide an estimated prediction for a partial instance is obtained. A set of core features is determined. A bias introduced by the data governance is identified based on a core feature being affected by the data governance. In response to identifying a bias, an anti-bias procedure is applied on the machine learning model, whereby mitigating the bias introduced by the data governance.

Mitigating governance impact on machine learning

Method, apparatus and product for purpose-based data access control. Having a data about a subject, for which usage is approved for a purpose, a first encryption key associated with the first purpose is obtained. A link pointing to a first alias of the data is generated, the first alias being associated with the first purpose. The link pointing to the first alias is encrypted with the first encryption key to obtain a first encrypted link; and access is provided to the first encrypted link, whereby access to the data is obtainable by decrypting the first encrypted link with the first decryption key to obtain the first alias and using the first alias to access the data. In some cases, a second link for a second can be similarly generated. Upon revocation of approval, a corresponding alias is eliminated to prevent access thereby. The links may be retained in a decentralized ledger, such as a blockchain.

Purpose-based data access control

A method, apparatus and product for data-encryption-based purpose-specific access control. The method comprising: having data of a subject, wherein an approval for usage of the data for a purpose is provided; obtaining an encryption key associated with the purpose, wherein a decryption key is required for decrypting information encrypted with the encryption key; encrypting the data using the encryption key, whereby obtaining purpose-based encrypted data that is encoded with the purpose for which the data can be used; and enabling access to the purpose-based encrypted data to one or more data consumers, whereby access to the data is obtainable by decrypting the purpose-based encrypted data using the decryption key that is available to data consumers that are certified for the purpose.

Data-encryption-based purpose-specific access control

Embodiments may provide techniques that provide the capability to manage consent for access to personal data common to multiple people. For example, a method may comprise identifying data for which at least a portion of the data is common to a plurality of individuals or entities, determining a consensus level, for a purpose, of the individuals or entities to which the stored data is common, the consensus level being required for access to the data, transmitting a request for consent to the stored data to each of the plurality of individuals or entities, receiving responses to the requests for consent from at least some of the plurality of individuals or entities, determining a consensus score based on the received responses to the requests for consent, and allowing or denying access to the stored data based on the determined consensus score and on the required consensus level.

Consent for common personal information

A method of creating an application purpose certificate, comprising: receiving from a software publisher an application code and declared privacy information, the declared privacy information includes at least one allowed usage purpose for each of a plurality of data types; analyzing the application's usage of data of each of the plurality of data types; verifying the usage is compliant with the least one allowed usage purpose according to the analysis; creating an encrypted digital purpose certificate, the digital purpose certificate is unique for the application code; and sending the digital purpose certificate to the software publisher to be bundled with the application code and a publisher authentication certificate.

Digital certificate for verifying application purpose of data usage

Machines, systems and methods for identification of a consumer are provided. The method comprises capturing a unique identifier (ID) associated with a computing device, wherein the computing device is configured to access content stored on one or more content servers; and associating the unique ID with tracking data associated with the computing device, wherein when the computing device submits a request to a content server to access content, wherein in response to retrieving at least one of the unique ID or the tracking data of the computing device, the computing device is identified and content pages accessed by the computing device are tracked by a machine that is aware of the association between the unique ID and the tracking data for the computing device.

Identification of consumers based on a unique device ID

Method, system, and computer program product are provided for enabling a content creator who is not an owner of a content site to provide variable content to content consumers. The method includes: defining content consumers by their relationship to a content creator; receiving a request for a content item from a content consumer; determining the relationship of the content consumer to the content creator; and returning a version of the content item for the determined relationship. A content creator may select content of a content item, and may provide different versions of the selected content with an indication of a relationship between the content creator and a content consumer for a version.

Variable content based on relationship to content creator

Device, system and method of physical context based wireless communication. For example, a method for physical context based wireless communication includes: determining an association between a spatial location of a wireless communication device and location context information related to said spatial location; determining an identity of a user of said wireless communication device; and determining an association between said user of the wireless communication device and said location context information.

Device, system, and method of physical context based wireless communication

Device, system, and method of project planning and management. For example, a method of project planning and management includes: publishing a representation of a project specification comprising one or more discrete objects; publishing a collaborative comment to one or more of the discrete objects; and receiving a supplier proposal to fulfill one or more of the discrete objects.

Device, system, and method of project planning and management

A method and system for filtering medical information in emergency situations are provided. The method includes receiving information relating to an emergency in which a person needs medical help, the information including: details of the type of emergency; and details of a care providing person aiding the person needing help. The method includes obtaining medical information relating to the emergency which may include information relating to the medical condition and/or medical records of the person. The level of medical expertise of the care providing person is determined and the medical information is filtered to provide the medical information appropriate to the level of medical expertise of the care providing person.

Filtering medical information

Establishing communication between people when face-to-face communication is difficult by pointing a portable device in a direction of a target and recording a position and orientation of the portable device and by recording a distance between the portable device and the target. Further, this communication is established by calculating a location of the target based on the recorded position, orientation, and distance and broadcasting, via the portable device, a message including the calculated location of the target. Moreover, this communication is established when the target receiving the message, compares the calculated location of the target with an actual position of the target to determine whether the target that received the initiation message is within a predetermined proximity of the calculated location of the target. If the receiving target is within the predetermined proximity of the intended target, a reply is transmitted to the portable device to initiate handshaking.

Growing community of inventors

Kochav Yair, Israel

Sima Nadler