International Business Machines Corporation

Stefan Schmitt

Timo Kussmaul

Daniel Blum

Andreas Stay

Peng Hui Jiang

Dieter Buehler

Holger Waterstrat

Xiang Dong Hu

Sascha Schefenacker

Andreas Nauerz

Stefan Alfons Hepper

Thomas Stober

Stefan Liesche

Carsten Leue

Oliver Then

Charles P De Saint-Aignan

Barbara Wald

Steffen Uhlig

Oliver Rau

Ephraim Petry

A computer-implemented method for building and using a multi-party Attestation Model for controlling operation of a multi-tenant cloud infrastructure which includes providing a trusted execution environment (TEE) within the multi-tenant cloud infrastructure, receiving a set of requirements from each of a plurality of tenants of the multi-tenant cloud infrastructure, building an Attestation Model according to the sets of requirements, and deploying the Attestation Model within the TEE. In response to a determination that a change does not satisfy the Attestation Model for each of the plurality of tenants, a function is performed to separate components shared between tenants for which the change satisfies the Attestation Model from components shared between tenants for which the change does not satisfy the Attestation Model, and the change is deployed on the multi-tenant cloud infrastructure for the tenants for which the change satisfies the Attestation Model.

Building and using attestation model in confidential computing

Computer-implemented methods for optimizing a backup and recovery strategy of a database are provided. Aspects include obtaining service level agreements for the database, identifying an initial recommended database backup and recovery strategy for the database based on the service level agreements, and configuring a database backup of the database based on the initial recommended database backup and recovery strategy. Aspects also include monitoring a usage of one or more of the database and the database backup, identifying a recommended change to the configuration of the database backup based on the usage of one or more of the database and the database backup, and updating the configuration of the primary database based on the recommended change.

Database backup and recovery strategy optimization

Building and using a smart contract in order to resolve the isolation between database users and service operators for hyper-protect database as a service (DBaaS). The use of the smart contract in the hyper-protect DBaaS environment allows the service operator to perform operations on sensitive and secure data in the database owned by a user without necessarily revealing the content of the sensitive and secure data.

Using smart contracts to manage hyper protect database as a service

Providing software-as-a-service to a plurality of clients includes: visually rendering a first virtual portal and a set of portal resources according to a portal-resource association specified in a resource association matrix; identifying a set of server resources accessible from a portal server, the set of server resources excluding the set of portal resources; determining a score for a first resource of the set of server resources; visually rendering the first resource; and associating the first resource with the first virtual portal in the resource association matrix by adding an identifier of the scored resource.

Building a multi-tenant portal application

Granting an aligned secured access to a resource for a client system. A first authentication token and a first validity time period value are received from a first server. The first authentication token includes an authorization for accessing the system resource and the predefined session time. The first authentication token including the predefined session time is sent from the client system to a second server. A second validity period value of a second validity period of a second authentication token for a service provided by the second server to the client system is set equal to the received predefined session time. The second authentication token for the second validity period is sent from the second server to the client system such that an aligned secured access is granted for the client system to the resource.

Align session security for connected systems

Providing software-as-a-service to a plurality of clients includes: selecting a first virtual portal, determining a score for a first resource to generate a first scored resource, determining a set of scored resources, visually rendering the first virtual portal and the set of portal resources, visually rendering the set of scored resources, and selecting a scored resource from the set of scored resources to be associated with the first virtual portal by updating the resource association matrix with an identifier of the scored resource. The score is selected to represent a usefulness factor of the first resource. Each scored resource of the set of scored resources is selected to be different than each portal resource of a set of portal resources associated with the first virtual portal by a resource association matrix.

A portal server comprises memory, a profile manager, a profile selector, and a profile initiator. The profile manager is configured to manage a plurality of profile records in a profile database. The profile selector is configured to select at least one of the plurality of profile records based on context data collected at a client and context data collected at the portal server. The collected context data corresponds to particular user interaction activity with the portal server. The profile initiator is configured to adapt a user interface based on the profile selected by the profile selector.

Automatically adapting a user interface

The present invention relates to the field of Network portals and in particular to a method and system for restricting access rights on user profile information using a new notion of peer groups, wherein a given user's peer group is defined to be the set of users containing all the members of all the user's communities, wherein the individual communities are defined within the web portal wherein on said web portal a plurality of composite applications are implemented, wherein each composite application () has a predetermined number of users working with said composite application building a community for that composite application, characterized by the steps of: 

Method and system for restricting access rights on user profile information using a new notion of peer

A system for providing a dynamic web portal page in a web portal environment by modifying the web portal page, where the system includes: a server configured to provide a content with at least one portlet of the web portal page to a user. The server enters code into the provided content of the web portal page for identifying user-interface elements in the content of the web portal page. The server enters code into the provided content of the web portal page for monitoring user actions related to the identified user-interface elements in the content of the web portal page. The server re-configures automatically the content of the web portal page according to a user-specific preference extracted from the monitored user actions for the user at a later stage.

Growing community of inventors

Holzgerlingen, Germany

Stefan Schmitt