International Business Machines Corporation

Hcl Technologies Limited

Sreekanth Ramakrishna Iyer

Nataraj Nagaratnam

Jeffrey Robert Hoy

Ravi Krishnan Muthukrishnan

Kaushal Kiran Kapadia

Gandhi Sivakumar

Sridhar R Muppidi

Sandeep R Patil

Matthew B Trevathan

Sri Ramanathan

Sulakshan Vajipayajula

Raman Harishankar

Nanjangud C Narendra

Sudheesh S Kairali

Vijay R Kalangumvathakkal

Jojo Joseph

Karunakar Bojjireddy

Manoj Palat

Gowdhaman Jayaseelan

Ashish Kundu

Dimitrios Pendarakis

Paul Anthony Ashley

He Huang

Ronald B Williams

Gal A Shachor

Tian Cheng Liu

William Alexander Bird

Stefan Berger

Archana Kumar

Sasikanth B Ammanamanchi

Dusi Sarath Chandra

Craig M Trim

Aaron K Baughman

Rohit Pradeep Shetty

Harish Bharti

Gireesh Punathil

Flavio Alvarenga Bergamaschi

Rakesh Shinde

Jagdish Kumar

Ram Ravishankar

Kartik Srinivasan

Pratheek Karnati

Riju Reghunath

Nasser Ebrahim

Grigorij Kaplan

Ashish Kumar Thakur

Alberto Eduardo De Queiroz Dias

Alex Cherian

Vasanth K Kodi

A method includes: receiving, by a computing device, a microservice code from a user device; identifying, by the computing device, a service used by the microservice code; identifying, by the computing device, the service in a target cloud platform; generating, by the computing device, a modified microservice code by adding a predefined code template to the microservice code, the predefined code template being associated with the service in the target cloud platform; receiving, by the computing device, user input defining a value of a parameter in the predefined code template in the modified microservice code; and generating, by the computing device, a new deployment file for the target cloud platform based on the modified microservice code.

Adapting microservices to multi-platform deployments

Datasets can be synchronized across cloud-based computer environments using computer systems. A data map can be generated for source datasets for a plurality of computing environments, respectively, and an activation function can be determined based on the data map, for simultaneously activating a new dataset of a source system from one of the plurality of computing environments. A generation ID (identification) can be shared from the source system with one or more computing environments of the plurality of the computing environments, in response to receiving the activation function. The new dataset of the source system can be replicated across the one or more computing environments. A data synchronization trigger can be activated, using a synchronization coordinator module of the computer, and the data synchronization can be completed across the plurality of computing environments.

Synchronized activation of datasets in multicloud computing environment

For providing computing resources to a user a liaison service initializes communication for first and second computing resources for the user. The liaison services communicate between the user and the computing resources. The communicating authenticates respective requests by the user for the respective first and second computing resources. Initializing the first and second computing resource services for the user by the liaison service includes providing, to the user via the liaison service, respective first and second account identifiers for the respective first and second computing resource services and includes storing in association with the first and second account identifiers, by the liaison service in a user password vault, respective first and second computing resource key identifiers.

Technology for computing resource liaison

Aspects of the present invention provide for methods that index geographic locations with comparative indicators that are determined from a sentiment analysis of opinion data, wherein the comparative indicators may include sums of different indices that are each determined from sentiment analysis of opinion data.

Location based data mining comparative analysis index

A framework system is present that provides an end-to-end solution for user on-boarding, storing, securing, configuring, authenticating of the target person (grantee user), and transmittal of digitized documents assets. The framework system is preferably a multi-tenant cloud based system, although other systems may be used. The system processes multiple inputs to cognitively determine implementation (cognitive decision making) of digitized assets to a grantee user or target user without human intervention.

Adaptable access to digital assets

Data item transfer between mobile devices is provided. Network association and proximity of a plurality of mobile devices of a requested data item by a requesting mobile device are determined using a shared ledger of mobile device inventory data, mobile device network connection data, and mobile device geolocation data. A target mobile device that contains the requested data item, is connected to a same local network as the requesting mobile device, and is geographically located proximate with a threshold to the requesting mobile device is identified based on the determined network association and proximity of the plurality of mobile devices and data in the shared ledger. A transfer of the requested data item from the target mobile device to the requesting mobile device is initiated via the same local network based on mobile device management policies.

Data item transfer between mobile devices

A method, apparatus and computer program product for managing a plurality of VPN tunnels between a first cloud and a second cloud in a hybrid cloud environment is described. In a first virtual private network (VPN) manager a request is received from a first cloud application resident in the first cloud. The request includes a first set of requirements for a first VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a first VPN manager request to a first system in a first cloud, wherein the first system creates the first VPN tunnel according to the first set of requirements. The VPN manager receives a request from a second cloud application resident in the first cloud. The request includes a second set of requirements for a VPN tunnel in the plurality of VPN tunnels. The VPN manager sends a second VPN manager request to the system in a first cloud, wherein the second VPN manager request contains the second set of requirements. The second VPN manager request is either tuning the first VPN tunnel according to both the first and second set of requirements if the first and second requirements are compatible or creating a second VPN tunnel between the first node and the second node if the first and second requirements are not compatible, the second VPN tunnel created by the first system.

Dynamically defined virtual private network tunnels in hybrid cloud environments

Aspects of the present invention provide devices that index geographic locations with comparative indicators that are determined from a sentiment analysis of opinion data, wherein the comparative indicators may include sums of different indices that are each determined from sentiment analysis of opinion data.

Aspects of the present invention provide a negotiative chat bot that executes a back-end security process to resolve a status of a suspicious input as safe or unsafe; creates conversational chat bot messages that request content subject matter in response that are different from content of the suspicious request or chat bot message responses from the identified user; and generate and present conversational chat bot messages that present created conversational chat bot message content in a style that matches a preferred conversational style of the identified user. Aspects iteratively repeating presenting conversational chat bot messages requesting subject matter content different from subsequent conversational chat bot message responses in the style that matches the preferred conversational style, until determining that the suspicious input status is resolved.

Negotiative conversation chat bot

A computer-implemented method for distributing digital certificates. A request for a digital certificate is received from a requesting system. A deployment challenge is sent to the trust agent running on the requesting system. A response to the deployment challenge is received from the trust agent running on the requesting system. The response to the deployment challenge is evaluated to determine whether the response is correct. The digital certificate is distributed to the requesting system in response to a determination that the response to the deployment challenge is correct.

Secure trust based distribution of digital certificates

A system and non-transitory computer program product for distributing digital certificates. A request for a digital certificate is received from a requesting system. A deployment challenge is sent to the trust agent running on the requesting system. A response to the deployment challenge is received from the trust agent running on the requesting system. The response to the deployment challenge is evaluated to determine whether the response is correct. The digital certificate is distributed to the requesting system in response to a determination that the response to the deployment challenge is correct.

Technologies for providing software code and data with in-memory protection through runtime memory encryption are described. A service comprising an integration component (an interface set) receives software program code and data that is to be protected in one or more protected areas of execution in memory. The integration component can integrate with a software development pipeline. The service (e.g. a wrapper engine component thereof) obtains the software program code and wraps the software program code and the data into a wrapped component. The service generates a secure counterpart program for executing in one or more protected areas of execution in memory (e.g., an enclave).

Facilitating build and deploy runtime memory encrypted cloud applications and containers

In response to an attempt to install an instance of a container in a production environment, a set of security criteria associated with the container and features of the production environment are compared. Based on the comparison, a determination is made as to whether the features of the production environment satisfy the set of security criteria.

Enforcing security policies for software containers

This disclosure provides the ability for a cloud application to specify its security requirements, the ability to have those requirements evaluated, e.g., against a specific cloud deployment environment, and the ability to enable the application to control a cloud-based security assurance service to provision additional security technology in the cloud to support deployment (or re-deployment elsewhere) of the application if the environment does not have the necessary topology and security resources deployed. To this end, the application queries the service by passing a set of application-based security rights. If the security capabilities provided by the security assurance service are sufficient or better than the application's security rights, the application functions normally. If, however, the security environment established by the security assurance service is insufficient for the application, the application is afforded one or more remediation options, e.g., issuing a request to upgrade the security environment, or the like.

Application-based security rights in cloud environments

A user state tracking and anomaly detector for multi-tenant SaaS applications operates in association with a log management solution, such as a SIEM. A given SaaS application has many user STATES, and the applications often have dependencies on one another that arise, for example, when a particular application makes a request (typically on behalf of a user) to take some action with respect to another application. The detector includes a mapper that maps the large number of user STATES to a reduced number of mapped states (e.g., 'red' and 'green'), and a dependency module that generates user-resource dependency graphs. Using a dependency graph, a SaaS modeler in the detector checks whether a particular dependency-based request associated with a SaaS application is valid. State and dependency information generated by the mapper and dependency module are reported back to the log management solution to facilitate improved logging and anomaly detection.

User state tracking and anomaly detection in software-as-a-service environments

Growing community of inventors

Karnataka, India

Sreekanth Ramakrishna Iyer