International Business Machines Corporation

Venkat Raghavan

Dinesh C Verma

Heather Maria Hinton

Mudhakar Srivatsa

Ivan Matthew Milman

Sridhar R Muppidi

Shane Bradley Weeden

Gavin George Bray

Anthony Scott Moran

Ian Glazer

Brian James Turner

Shane Weeden

Casey M Plunkett

A network management method, system, and non-transitory computer readable medium, include a data center gateway including a set of rules for moving target defense and communicates with a service provider and a cloud gateway including the set of rules to communicate with the data center gateway by satisfying the moving target defense such that a client receives a service from the service provider when the cloud gateway requests the service from the data center gateway.

System, method, and recording medium for moving target defense

Technical solutions are described for transportation of a shipment container. An example method includes receiving, by a first client device, a document schema from a document schema server, the document schema corresponding to a second client device. The method further includes creating, by the first client device, an electronic document according to the document schema, the electronic document created for transmission to the second client device. The creating includes generating, by the first client device, the electronic document including data-fields as specified by the document schema, and filling the data-fields of the electronic document as specified by the document schema. The computer-implemented method also includes transmitting, by the first client device, the electronic document for receipt by the second client device.

Tracking shipment container

Technical solutions are described for conserving battery consumption in tracking devices when tracking a plurality of shipment items. An example method includes receiving, by a first tracking device that is associated with a first shipment item, a tracking information of a second shipment item, the tracking information being transmitted by a second tracking device. The method also includes transmitting, by the first tracking device, a tracking message that includes the tracking information of the second shipment item and a tracking information of the first shipment item.

Battery efficiency for tracking shipment items

A method, system and computer program for business process automation facilitates transforming a user's identity/credentials as part of the enablement of transaction fulfillment, e.g., within a SOA environment. In one embodiment, identity and attribute information is added to one or more business process models that each represents a sub-transaction within an overall transaction fulfillment business process flow. As the business model is mapped to an execution environment, the identity and attribute information in the model is used to configure appropriate tooling to define the identity/attribute transformation required to complete the particular portion of the transaction represented by the model. In a representative implementation, the business process models conform to BPEL4WS, and one or more of these models are extended with identity mapping information such that, during transaction fulfillment, local identity mapping transformations provide the identity/credential propagation required to support the business process.

Business process enablement for identity management

A method and a system are presented in which federated domains interact within a federated environment. Domains within a federation can initiate federated single-sign-on operations for a user at other federated domains. A point-of-contact server within a domain relies upon a trust proxy within the domain to manage trust relationships between the domain and the federation. Trust proxies interpret assertions from other federated domains as necessary. Trust proxies may have a trust relationship with one or more trust brokers, and a trust proxy may rely upon a trust broker for assistance in interpreting assertions. When a user is provisioned at a particular federated domain, the federated domain can provision the user to other federated domains within the federated environment. A provision operation may include creating or deleting an account for a user, pushing updated user account information including attributes, and requesting updates on account information including attributes.

Method and system for federated provisioning

A method, system, apparatus, and computer program product are presented to support computing systems of different enterprises that interact within a federated computing environment. Federated single-sign-on operations can be initiated at the computing systems of federation partners on behalf of a user even though the user has not established a user account at a federation partner prior to the initiation of the single-sign-on operation. For example, an identity provider can initiate a single-sign-on operation at a service provider while attempting to obtain access to a controlled resource on behalf of a user. When the service provider recognizes that it does not have a linked user account for the user that allows for a single-sign-on operation with the identity provider, the service provider creates a local user account. The service provider can also pull user attributes from the identity provider as necessary to perform the user account creation operation.

Growing community of inventors

Austin, TX, United States of America

Venkat Raghavan