International Business Machines Corporation

William Alton Fiveash

Gerald Francis McBrearty

Shawn Patrick Mullen

Johnny Meng-Han Shieh

Jacqueline Hegedus Wilson

Denise Marie Genty

Christiaan Blake Wenzel

Pau-Chen Cheng

Guha Prasad Venkataraman

Xinya Wang

Vachaspathi Peter Kompella

Scott Allen Carroll

Ajit Clarence D'Sa

Opral Vanan Wisham

The present invention is embodied in a system and method for monitoring and alerting remote client users of digital intrusions of their computers by host servers. In general, the present invention monitors actions taken by host servers relating to information about the remote client and displays graphical alerts when a digital intrusion or a breach of security occurs during a network connection, such as a connection to the Internet, with the host server. Specifically, the present invention monitors certain aspects of the remote client user s interaction with host servers. Based on certain interaction, such as an attempt by the host server to retrieve non-related information about the remote client, the remote client user can be provided with a graphical alert. This allows the remote client user to make an informed decision whether or not to allow certain host server sites to retrieve the client user s personal information.

System and method for alerting computer users of digital security intrusions

A system and method for providing multiple virtual private networks from a computer system. The computer system communicates with a remote computer system in order to allow encrypted data traffic to flow between the respective systems. Two phases are used to authenticate the computer systems to one another. During the first phase, digital certificates or pre-shared keys are used to authenticate the computer systems. A phaseID rules list contains authentication rules for local-remote computer pairs. During the second phase, a hash value is used to authenticate the computer systems and a security association payload is created. The remote system's IP address is used for connecting. The phaseID rules list corresponds to one or more phaseID rules lists. If the remote ID is not found in the phaseID rules list, a default rule is used based upon the phaseID rules list.

System and method for multiple virtual private network authentication schemes

A method of protecting a data processing system is provided. In a preferred embodiment the data processing system temporarily switches from a main system library mode to a safe system library mode. A user then may open and read a document, such as, for example, an e-mail message, and any virus or worm contained in the document will be prevented from executing and damaging the data processing system.

Method of automatically instituting secure, safe libraries and functions when exposing a system to potential system attacks

A method and apparatus for use in data processing system for selecting rules to filter data for a tunnel. A request is received to create a tunnel to another data processing system. A granularity of information about the data processing system is identified to form an identified granularity. The identified granularity of the information about the data processing system is used to select a rule, which matches the identified granularity. This rule is placed in a filter, wherein the filter associates data packets with the tunnel.

Method and apparatus for automatic configuration for internet protocol security tunnels in a distributed data processing system

For a presentation comprising a plurality of presentation segments, timing is established through the combination of assigning a portion of a total presentation time to each of the plurality of presentation segments, displaying the time assigned to each of said presentation segments, enabling a user to change the time assigned to the segment being presented, and in response to a change in said time, dynamically reapportioning the remaining total time among the subsequent sequential presentation segments. The reapportioned times for said subsequent sequential presentation segments can further be displayed. There may also be means, responsive to the change in the time, for dynamically eliminating one of said sequential segments. In slide presentations, there may be means for displaying the reapportioned times for said subsequent sequential individual slides together with miniaturizations of each of said subsequent sequential individual slides.

Computer display system for dynamically controlling the pacing of sequential presentation segments in response to user variations in the time allocated to specific presentation segments

Protecting open Web sites from known malicious users in a World Wide Web (Web) communication network with access to a plurality of open Web sites responsive to requests from users at IP addresses throughout the Web. There is provided in association with a protected open Web site, a stored list of the IP addresses of known malicious users combined with means for comparing the IP addresses of each user requesting access to the protected open Web site to said list of IP addresses of the known malicious users. There are also implementations responsive to the comparing means for diverting to an alias address for the protected Web site any request from the IP address of a malicious user. The alias address is provided by a function associated with the protected open Web site. The present invention is applicable in circumstances where the malicious users or &ldquo;crackers&rdquo; are already known.

Protecting open world wide web sites from known malicious users by diverting requests from malicious users to alias addresses for the protected sites

A method of securing data traffic between a local and remote host systems is provided. The method includes autogenerating a filter having rules associated with a defined tunnel. The filter rules are used to permit or deny acceptance of transmitted data by the host system and to direct traffic to the tunnel. The tunnel, on the other hand, is used to keep data confidential. The method further includes autogeneration of a counterpart tunnel and associated filter to be used by the remote host when in communication with the local host. The method further autogenerates a new filter to reflect changes to any one of the tunnels and autodeactivates the filter associated with a deleted tunnel.

Growing community of inventors

Austin, TX, United States of America

William Alton Fiveash