专利快速检索-快速检索全球专利，免费商用专利数据库-IPRDB

1. 发明申请

US20200076861A1 INTRUSION DETECTION AND MITIGATION IN DATA PROCESSING 审中-公开
公开(公告)号：US20200076861A1
公开(公告)日：2020-03-05
申请号：US16675317
申请日：2019-11-06
申请人： International Business Machines Corporation
发明人： Alexandra Shulman-Peleg , Shmuel Regev , Ron Peleg , Shahar Kohanim , Zohar Basil
IPC分类号： H04L29/06 , G06F21/53 , G06F21/55
摘要： A security manager configured to generate a plurality of learned security policies and provide at least one learned security policy and a security agent to a client machine for enforcement of the at least one learned security policy by the security agent on the client machine. The security manager configured to receive alerts from the security agent indicating anomalous behavior on the client machine.

2. 发明授权

US09824231B2 Retention management in a facility with multiple trust zones and encryption based secure deletion 有权
公开(公告)号：US09824231B2
公开(公告)日：2017-11-21
申请号：US14582220
申请日：2014-12-24
申请人： International Business Machines Corporation
发明人： Michael Factor , Daivid Lebutsch , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F21/00 , G06F21/62 , H04L9/08 , G06F21/60 , H04L29/06
CPC分类号： G06F21/6218 , G06F21/602 , G06F2221/2137 , H04L9/0822 , H04L9/0861 , H04L9/088 , H04L9/0894 , H04L63/0428 , H04L63/108 , H04L2209/60
摘要： A computing facility, including a storage management system belonging to a first trust zone having a first privilege level, a metadata management system belonging to a second trust zone having a second privilege level higher than the first privilege level, and a security management system belonging to a third trust zone having a third privilege level higher than or equal to the second privilege level. The storage management system is and configured to store multiple content entities, and the metadata management system is configured to manage, for each of the multiple content entities, metadata including a respective content encryption key and a respective retention time, each of the content entities being encrypted by its respective content encryption key. The security management system is configured to manage a master encryption key used to create the respective content encryption keys, and to confirm expiration of the respective retention times.

3. 发明申请

US20150134619A1 DIGITAL DATA RETENTION MANAGEMENT 有权
标题翻译：数字资料保存管理
公开(公告)号：US20150134619A1
公开(公告)日：2015-05-14
申请号：US14464855
申请日：2014-08-21
申请人： International Business Machines Corporation
发明人： Michael E. Factor , Bernhard Kurtz , David Lebutsch , Cataldo Mega , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F17/30
CPC分类号： G06F17/30085 , G06F17/30117 , G06F17/3012 , G06F21/6209
摘要： Embodiments relate to digital data retention management. An aspect includes calculating a retention date associated with a data object in a storage system. Another aspect includes generating a cryptographic checksum for metadata relating to said data object, the metadata comprising the retention date. Another aspect includes storing said metadata and said cryptographic checksum. Another aspect includes, based on receiving a request to perform a deletion transaction on said data object for deleting said data object from the storage system: verifying metadata validity by checking the cryptographic checksum for the metadata associated with said data object to detect possible tampering of the metadata; verifying retention expiration by determining that a current date is past the retention date comprised in said metadata; and based on successful verification of metadata validity and retention expiration, authorizing deletion of said data object by the storage system
摘要翻译：实施例涉及数字数据保留管理。一方面包括计算与存储系统中的数据对象相关联的保留日期。另一方面包括为与所述数据对象相关的元数据生成加密校验和，所述元数据包括保留日期。另一方面包括存储所述元数据和所述密码校验和。另一方面包括：基于接收对所述数据对象执行删除事务的请求以从所述存储系统中删除所述数据对象：通过检查与所述数据对象相关联的元数据的加密校验和来检验元数据有效性，以检测所述数据对象的可能的篡改元数据通过确定当前日期超过所述元数据中包含的保留日期来验证保留期满; 并且基于元数据有效性和保留期限的成功验证，授权存储系统删除所述数据对象

4. 发明授权

US10965717B2 Intrusion detection and mitigation in data processing 有权
公开(公告)号：US10965717B2
公开(公告)日：2021-03-30
申请号：US16675317
申请日：2019-11-06
申请人： International Business Machines Corporation
发明人： Alexandra Shulman-Peleg , Shmuel Regev , Ron Peleg , Shahar Kohanim , Zohar Basil
IPC分类号： H04L29/00 , H04L29/06 , G06F21/53 , G06F21/55
摘要： A security manager configured to generate a plurality of learned security policies and provide at least one learned security policy and a security agent to a client machine for enforcement of the at least one learned security policy by the security agent on the client machine. The security manager configured to receive alerts from the security agent indicating anomalous behavior on the client machine.

5. 发明申请

US20190036978A1 INTRUSION DETECTION AND MITIGATION IN DATA PROCESSING 审中-公开
公开(公告)号：US20190036978A1
公开(公告)日：2019-01-31
申请号：US15660016
申请日：2017-07-26
申请人： International Business Machines Corporation
发明人： Alexandra Shulman-Peleg , Shmuel Regev , Ron Peleg , Shahar Kohanim , Zohar Basil
IPC分类号： H04L29/06 , G06F21/55
CPC分类号： H04L63/205 , G06F21/53 , G06F21/554 , G06F2221/034 , H04L63/1416 , H04L63/1441
摘要： A security manager configured to generate a plurality of learned security policies and provide at least one learned security policy and a security agent to a client machine for enforcement of the at least one learned security policy by the security agent on the client machine. The security manager configured to receive alerts from the security agent indicating anomalous behavior on the client machine.

6. 发明授权

US09613038B2 Digital data retention management 有权
公开(公告)号：US09613038B2
公开(公告)日：2017-04-04
申请号：US14464855
申请日：2014-08-21
申请人： International Business Machines Corporation
发明人： Michael E. Factor , Bernhard Kurtz , David Lebutsch , Cataldo Mega , Alexandra Shulman-Peleg , Tim Waizenegger
IPC分类号： G06F17/30 , G06F21/62
CPC分类号： G06F17/30085 , G06F17/30117 , G06F17/3012 , G06F21/6209
摘要： Embodiments relate to digital data retention management. An aspect includes calculating a retention date associated with a data object in a storage system. Another aspect includes generating a cryptographic checksum for metadata relating to said data object, the metadata comprising the retention date. Another aspect includes storing said metadata and said cryptographic checksum. Another aspect includes, based on receiving a request to perform a deletion transaction on said data object for deleting said data object from the storage system: verifying metadata validity by checking the cryptographic checksum for the metadata associated with said data object to detect possible tampering of the metadata; verifying retention expiration by determining that a current date is past the retention date comprised in said metadata; and based on successful verification of metadata validity and retention expiration, authorizing deletion of said data object by the storage system.

7. 发明申请

US20160259807A1 SECURE ISOLATION OF TENANT RESOURCES IN A MULTI-TENANT STORAGE SYSTEM USING A SECURITY GATEWAY 有权
标题翻译：使用安全网关在多重存储系统中安全地分离潜在资源
公开(公告)号：US20160259807A1
公开(公告)日：2016-09-08
申请号：US15156821
申请日：2016-05-17
申请人： International Business Machines Corporation
发明人： Michael E. Factor , David Hadas , Elliot K. Kolodner , Anil Kurmus , Alexandra Shulman-Peleg , Alessandro Sorniotti
IPC分类号： G06F17/30 , H04L29/06
CPC分类号： G06F17/30165 , G06F9/00 , G06F9/46 , G06F17/30194 , G06F21/6218 , G06F21/6281 , G06F2221/2145 , H04L63/08 , H04L63/105
摘要： Machines, systems and methods for handling a client request in a hierarchical multi-tenant data storage system, the method comprising processing a request in subtasks, wherein a subtask is executed with a minimal set of privileges associated with a specific subtenant; extracting a claimed n-level hierarchy of a tenant and sub-tenant identities from the request; extracting authentication signatures or credentials that correspond to a level in the hierarchy; for a first level in the hierarchy, sending the request to a dedicated subtenant authenticator with privilege to validate credentials for a subtenant at the first level; and receiving a confirmation from the dedicated subtenant authenticator, whether the request is authentic.
摘要翻译：用于在分级多租户数据存储系统中处理客户端请求的机器，系统和方法，所述方法包括在子任务中处理请求，其中以与特定分部相关联的最小权限集来执行子任务; 从请求中提取租户和分租客身份的索赔的n级层次; 提取与层级中的级别相对应的认证签名或凭证; 对于层次结构中的第一级，将请求发送到具有用于验证在第一级的分类器的凭证的特权的专用分部鉴定器; 并且从专用分段认证器接收确认，请求是否可信。

8. 发明授权

US09396343B2 Policy access control lists attached to resources 有权
标题翻译：附加到资源的策略访问控制列表
公开(公告)号：US09396343B2
公开(公告)日：2016-07-19
申请号：US14517952
申请日：2014-10-20
申请人： International Business Machines Corporation
发明人： Michael Factor , Elliot K Kolodner , Alexandra Shulman-Peleg
IPC分类号： G06F21/62 , G06F21/60 , G11C29/52
CPC分类号： H04L63/101 , G06F21/6218 , H04L63/102 , H04L63/20
摘要： Methods, storage systems and computer program products implement embodiments of the present invention that include defining, for an entity, a policy access control list including one or more access rules, each of the access rules including one or more user conditions and one or more entity conditions. Upon receiving a request from a user to access a given entity, one or more user attributes associated with the user and one or more entity attributes associated with the given entity are identified. For each of the access rules, the one or more user conditions are applied to the one or more user attributes, the one or more entity conditions are applied to the one or more entity attributes. Access to the given content entity is granted to the user upon determining that a minimum threshold of the one or more user conditions and the one or more entity conditions are met.
摘要翻译：方法，存储系统和计算机程序产品实现本发明的实施例，其包括为实体定义包括一个或多个访问规则的策略访问控制列表，每个访问规则包括一个或多个用户条件和一个或多个实体条件。在接收到来自用户访问给定实体的请求时，识别与用户相关联的一个或多个用户属性以及与给定实体相关联的一个或多个实体属性。对于每个访问规则，一个或多个用户条件被应用于一个或多个用户属性，一个或多个实体条件被应用于一个或多个实体属性。在确定一个或多个用户条件的最小阈值和满足一个或多个实体条件的情况下，向用户授予对给定内容实体的访问。

9. 发明申请

US20140330869A1 SECURE ISOLATION OF TENANT RESOURCES IN A MULTI-TENANT STORAGE SYSTEM USING A SECURITY GATEWAY 有权
标题翻译：使用安全网关在多重存储系统中安全地分离潜在资源
公开(公告)号：US20140330869A1
公开(公告)日：2014-11-06
申请号：US13875301
申请日：2013-05-02
申请人： International Business Machines Corporation
发明人： Michael E. Factor , David Hadas , Elliot K. Kolodner , Anil Kurmus , Alexandra Shulman-Peleg , Alessandro Sorniotti
IPC分类号： G06F21/62
CPC分类号： G06F17/30165 , G06F9/00 , G06F9/46 , G06F17/30194 , G06F21/6218 , G06F21/6281 , G06F2221/2145 , H04L63/08 , H04L63/105
摘要： Machines, systems and methods for handling a client request in a hierarchical multi-tenant data storage system, the method comprising processing a request in subtasks, wherein a subtask is executed with a minimal set of privileges associated with a specific subtenant; extracting a claimed n-level hierarchy of a tenant and sub-tenant identities from the request; extracting authentication signatures or credentials that correspond to a level in the hierarchy; for a first level in the hierarchy, sending the request to a dedicated subtenant authenticator with privilege to validate credentials for a subtenant at the first level; and receiving a confirmation from the dedicated subtenant authenticator, whether the request is authentic.
摘要翻译：用于在分级多租户数据存储系统中处理客户端请求的机器，系统和方法，所述方法包括在子任务中处理请求，其中以与特定分部相关联的最小权限集来执行子任务; 从请求中提取租户和分租客身份的索赔的n级层次; 提取与层级中的级别相对应的认证签名或凭证; 对于层次结构中的第一级，将请求发送到具有用于验证在第一级的分类器的凭证的特权的专用分部鉴定器; 并且从专用分段认证器接收确认，请求是否可信。

10. 发明授权

US10599330B2 Challenge generation for verifying users of computing devices 有权
公开(公告)号：US10599330B2
公开(公告)日：2020-03-24
申请号：US16139042
申请日：2018-09-23
申请人： INTERNATIONAL BUSINESS MACHINES CORPORATION
发明人： Ayman Jarrous , Alexandra Shulman-Peleg , Eitan Menahem
IPC分类号： G06F3/0488 , G06F21/31 , G06F21/36 , H04L29/06
摘要： Challenging a current user of a computing device by measuring characteristics of user actions sensed by a computing device, determining that the measurements meet a uniqueness condition with respect to corresponding measurements in a comparison set of actions, recording the user actions and their measurements in a set of challenge actions associated with an authorized user, and responsive to a challenge requirement to determine whether a current user of the computing device is the authorized user, selecting challenge actions associated with an authorized user, prompting the current user to perform the selected challenge actions that are then sensed by the computing device, measuring characteristics of the prompted actions, and determining that the measurements of the characteristics of the prompted actions meet a similarity condition with respect to measurements of corresponding characteristics of the selected challenge actions.

你已经成功收藏专利！

检索式保存成功!

IPRDB

热门服务

关于我们

友情链接

联系方式