International Business Machines Corporation

Lenovo (singapore) Pte. Ltd.

Taylor L Schreck

Daniel Paul Kolz

Lee Hardy Wilson

Robert John Donovan

Christopher A Peterson

Garry Joseph Sullivan

Randall Scott Nelson

Christopher James Kundinger

Andrew W Wojtowicz

Tokunbo Adeshiyan

Darrel W Raknerud

David Christopher Hinkemeyer

Judith Trousdell

Rainieri Ventura

Joseph C Lindsay

John C Wingertsman, Iii

A method, system, and computer-readable storage media for granting a device access to a managed group are disclosed. Identification information may be exchanged between a management device in the managed group and a managed device through a secure first channel. If the identification information is verified by the management device, the managed device may be granted access to the managed group through the secure first channel. If access is granted, the managed device may access the managed group through a secure communication session on a network. If the identification information is not verified, the management device may send a cryptographic key to the managed device through the secure first channel. The cryptographic key may be used to create an encrypted communication session between the managed device and management device over the network.

Trusted system network

A method for using shared vulnerability to provide trusted communication services between systems is disclosed. For example, a server may deny access to a service which renders it vulnerable to an untrusted client unless access to a useful vulnerability is received from the client. That is, the server may trust the client because any misuse by the client may result in the server exploiting the shared vulnerability. A system may request access to a service on another system to perform some transaction. Upon receiving this request, the server may determine a vulnerability of the client useful in deterring or stopping unwanted actions. The server may request access to this vulnerability. Once this vulnerability has been granted to the server, the server may then grant access to the requested service to the client.

Trusted electronic communication through shared vulnerability

Embodiments of the invention generally provide methods, systems, and articles of manufacture that facilitate classification of a data access authority of unclassified users into one or more categories, and control access of data by the users based on the categories. When an unclassified user is found in an organization chart, one or more classified users near the unclassified user in the data tree may be identified. The unclassified user may be compared to the identified classified users to determine one or more suggested data access categories for classifying the unclassified user. The unclassified user may therefore be classified into one of the suggested data access category based on, for example, user input.

Data management in a computer system

Growing community of inventors

Rochester, MN, United States of America

Taylor L Schreck