International Business Machines Corporation

Taku Aratsu

Sanehiro Furuichi

Masami Tada

Daisuke Hayashi

Tomohiro Shimizu

Tomohiro Shioya

Satoshi Yokoyama

Hayato Kiriyama

Hideo Ichinomiya

Toshiyuki Komoda

Yohei Umehara

Yasutaka Nishimura

Takahito Tashiro

Akihiko Takajo

Tada Masami

Provided are techniques in which a document accompanying a service is acquired, a natural language analysis is per on the acquired document, a determination is made from the results of the natural language analysis whether an item defined in the access control policy is found in the acquired document and, when the item defined in the access control policy is found in the acquired document, the access control policy is referenced and access to the service controlled accordingly.

Verifying the terms of use for access to a service

An embodiment of the present invention provides a computer-implemented method for displaying one or more augmented reality (AR) objects on a transparent display device, comprising: associating data of one or more transparent areas corresponding to one or more real objects with a first layer for seeing one or more real objects on the transparent display device, wherein the data has information on a location and shape of the one or more real objects on the transparent display device, associating one or more AR objects with a second layer for displaying one or more AR objects on the transparent display device; and overlaying the first layer with the second layer to display the one or more AR objects on the transparent display device, wherein the one or more real objects are seen through the one or more transparent areas on the transparent display device by transparent area the transparent display device.

Displaying of augmented reality objects

Provided are techniques in which a document accompanying a service is acquired, a natural language analysis is performed on the acquired document, a determination is made from the results of the natural language analysis whether an item defined in the access control policy is found in the acquired document and, when the item defined in the access control policy is found in the acquired document, the access control policy is referenced and access to the service controlled accordingly.

A computer supports an operation by an operator of a target device. The computer stores a first topology indicating dependency relationship of a plurality of device types including a device type of the target device. The computer generates a second topology indicating dependency relationship of a plurality of devices including the target device, by performing, based on the first topology, a topology discovery for the plurality of devices. Each of the plurality of devices has any one of the plurality of device types. The computer provides an operation sequence of the plurality of devices to the operator. The operation sequence is generated based on the second topology.

Supporting operation of device

An information processing device having a lock function for restricting user operations and a mechanism executed by this information processing device are provided in which the information processing device includes: an input unit for receiving a first password and a specified location from a user; a mode setting unit for switching to a restricted mode restricting at least some of the functions of the information processing device in response to receiving the first password and location; and a releasing unit for releasing the restricted mode on condition that the information processing device has reached the specified location.

Limiting user operations

A data distribution system, method and program for generating a distribution package for distribution data to a client. An environment of a requesting client requesting distribution data is detected. A determination is made of an access control execution program for implementing an access control mechanism and a loading unit on the requesting client. The access control execution program is adapted to the detected environment of the requesting client and control access to a resource from a process in the client. The loading unit loads the distribution data to a protected storage area of the client. A determination is made of a security policy specified for the distribution data. A distribution package is generated including the distribution data, the security policy, the loading unit, and the access control execution program adapted to the environment of the requesting client; and transmitting the generated distribution package to the requesting client.

Generating a distrubition package having an access control execution program for implementing an access control mechanism and loading unit for a client

An object of the present invention is to process the speech of a particular speaker. The present invention provides a technique for collecting speech, analyzing the collected speech to extract the features of the speech, grouping the speech, or text corresponding to the speech, on the basis of the extracted features, presenting the result of the grouping to a user, and when one or more of the groups is selected by the user, enhancing, or reducing or cancelling the speech of a speaker associated with the selected group.

Method for processing speech of particular speaker, electronic system for the same, and program for electronic system

At least one of data, an indication of the data, and metadata associated with the data is received at a first computing system, wherein the data is to be categorized. It is determined that at least part of the data is not to be categorized by the first computing system. In response to a determination that at least part of the data is not to be categorized by the first computing system, it is determined that a second computing system is indicated for categorization of the data and at least one of the data, an indication of the data, and the metadata associated with the data is transmitted from the first computing system to the second computing system.

Categorizing data to perform access control

A resource protection program, apparatus, and method for protecting resources to be processed on a computer. The resource protection program causes a computer to implement: a preparatory function as a function for preparing multiple defined state transition histories and multiple defined actions, both of which are associated with each other, wherein each of the defined state transition histories defines a state transition history of the computer upon execution of predetermined access to a predetermined resource, and each of the defined actions defined to be executable when a transition is made from a defined state to the next defined state; and an action execution function for selecting, upon execution of the real access to the real resource, a defined action associated with a marched defined state transition history from among one or more defined actions to execute die defined action selected.

Resource protection from unauthorized access using state transition histories

A sensitivity label for document information in a document may be determined in real time, according to one embodiment, by flexibly and dynamically determining a sensitivity label for the document based on content included in information within the document. Information within a document varies from day to day, for example, document information may decrease in importance with time, increase in importance due to an event, etc. Therefore, the sensitivity label of the document, according to embodiments described herein, may also change dynamically in accordance with document content, information, etc.

Determining a sensitivity label of document information in real time

Provided are a computer readable storage medium, computer apparatus, and method for securely managing the execution of screen rendering instructions in a host operating system and virtual machine. A first rendering instruction hooking section is set to a first mode to hook a screen rendering instruction issued by a virtual machine application in a virtual machine. A second rendering instruction hooking section is set to a second mode to hook instructions issued by the virtual machine application. The hooked screen rendering instruction issued by the virtual machine application are encrypted in response to the setting of the first mode to produce illegible output. The hooked screen rendering instruction issued by the virtual machine application are encrypted in response to the setting of the second mode. The encrypted hooked screen rendering instruction encrypted in the second mode are issued to a host operating system to decrypt.

Growing community of inventors

Tokyo, Japan

Taku Aratsu