John E Karat

US Patent:

7478157, Jan 13, 2009

Filed:

Nov 7, 2001

Appl. No.:

10/046034

Inventors:

Kathryn A. Bohrer - Austin TX, US
Catherine A. Chess - Ossining NY, US
Robert L. Hoch - Wilton CT, US
John Karat - Greenwich CT, US
Dogan Kesdogan - White Plains NY, US
Xuan Liu - Yorktown Heights NY, US
Edith G. Schonberg - New York NY, US
Moninder Singh - Hamden CT, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 15/173

US Classification:

709226, 709223, 709224, 709225, 726 1, 726 26, 726 27

Abstract:

An exemplary embodiment of the present invention includes a method to enforce privacy preferences on exchanges of personal data of a data-subject. The method comprises the steps of: specifying data-subject authorization rule sets having subject constraints, receiving a request message from a requester and a requester privacy statement, comparing the requester privacy statement to the subject constraints, and releasing the data-subject data in a response message to the requester only if the subject constraints are satisfied. The requester privacy statement includes purpose, retention, recipient, and access information, wherein the purpose information specifies the purpose for which the requested data is acquired, the retention information specifies a retention policy for the requested data, the recipient information specifies the recipients of the requested data, and the access information specifies whether the requested data should be accessing to the data-subject after the data has been released.

US Patent:

7711749, May 4, 2010

Filed:

Aug 20, 2007

Appl. No.:

11/841298

Inventors:

Carolyn Brodie - Briarcliff Manor NY, US
Nigel Brown - Ontario, CA
John Karat - Greenwich CT, US
Clare Marie Karat - Greenwich CT, US
Peter Malkin - Ardsley NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 17/30

US Classification:

707783, 707805

Abstract:

Method and system of providing an association between a system's meta-tagged data objects and a list of terms, the association indicating which objects are and are not covered by a given policy, in one aspect, may comprise obtaining a list of terms and a policy that includes one or more of the terms; identifying a plurality of meta-tags used in a system; developing one or more mappings between the terms and the meta-tags; identifying system data objects in the system having one or more meta-tags; creating for each meta-tag of each system data object identified, an association between the system data object and the one or more terms to which the meta-tag is mapped, the association indicating whether the system data object is or is not covered by the policy.

US Patent:

8176019, May 8, 2012

Filed:

Apr 3, 2008

Appl. No.:

12/062218

Inventors:

Carolyn A. Brodie - Briarcliff NY, US
Clare-Marie Karat - Greenwich CT, US
John Karat - Greenwich CT, US
Peter K. Malkin - Ardsley NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 7/00
G06F 17/00
G06F 7/04
G06F 15/16
G06F 17/30
H04L 29/06

US Classification:

707694, 726 1, 726 6

Abstract:

A method and system enable a user to develop domain-specific policy workbench. Domains may include, but are not limited to security, autonomic computing, workload management and systems management. The method and system in one aspect determines syntax of a policy in a selected domain and creates an instance of policy workbench specific to the selected domain. In one aspect, the instance of policy workbench includes at least machine-readable encodings of the selected policy and associated mapping. The instance of policy workbench also includes a compliance auditing tool enabled to check events logged at a target system against the selected policy and associated mapping to determine if one or more policy rules have been complied with. In another aspect, domain-specific policy workbench creation machine is provided that automatically creates an instance of domain-specific policy workbench.

US Patent:

8429709, Apr 23, 2013

Filed:

Aug 20, 2007

Appl. No.:

11/841274

Inventors:

Carolyn Brodie - Briarcliff Manor NY, US
Nigel Brown - Ontario, CA
John Karat - Greenwich CT, US
Clare Marie Karat - Greenwich CT, US
Peter Malkin - Ardsley NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 29/06

US Classification:

726 1, 707694

Abstract:

Method and system of providing an association between a system's meta-tagged data objects and a list of terms, the association indicating which objects are and are not covered by a given policy, in one aspect, may comprise obtaining a list of terms and a policy that includes one or more of the terms; identifying a plurality of meta-tags used in a system; developing one or more mappings between the terms and the meta-tags; identifying system data objects in the system having one or more meta-tags; creating for each meta-tag of each system data object identified, an association between the system data object and the one or more terms to which the meta-tag is mapped, the association indicating whether the system data object is or is not covered by the policy.

US Patent:

20040002959, Jan 1, 2004

Filed:

Jun 26, 2002

Appl. No.:

10/180424

Inventors:

Sherman Alpert - Briarcliff Manor NY, US
Clare-Marie Karat - Greenwich CT, US
John Karat - Greenwich CT, US
John Vergo - Yorktown Heights NY, US
Carolyn Brodie - Briarcliff Manor NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F017/30

US Classification:

707/003000

Abstract:

A method for providing search support for searching an information data processing application having searchable elements with associated information is presented, wherein the method includes the steps of accessing a searchable element of the information data processing application, requesting search support while accessing the searchable element, generating a search form having multiple selectable choices in accordance with a subject of the information associated with the accessed searchable element, selecting at least one choice of the search form, and performing a search of the searchable elements using each selected choice as search criteria. Furthermore, a search support system is presented for providing search support for searching an information data processing application having searchable elements with associated information. The search support system includes means for accessing a searchable element of the information data processing application; means for requesting search support while accessing the searchable element; means for generating a search form having multiple selectable choices in accordance with a subject of information associated with the accessed searchable element; means for selecting at least one choice of the search form; and means for performing a search of the searchable elements using each selected choice as search criteria.

US Patent:

20050256848, Nov 17, 2005

Filed:

May 13, 2004

Appl. No.:

10/844996

Inventors:

Sherman Alpert - Briarcliff Manor NY, US
Thomas Cofino - Rye NY, US
John Karat - Greenwich CT, US
John Vergo - Yorktown Heights NY, US
Catherine Wolf - Katonah NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F007/00

US Classification:

707003000

Abstract:

A method and apparatus are disclosed for ranking the results of a document search by identifying a prior, similar search and assigning a weight to each document based on whether the document was selected by a user of the prior search. The assigned weights are utilized to rank the documents identified by the document search in order of their relevance to the search terms. The search terms of the document search and information describing the selections made by a user of the document search are then stored to facilitate the assignment of weights to documents in future searches. According to another aspect of the invention, the weight assigned to a document is correlated to a degree of closeness of search terms of a prior search and search terms of a new document search. For example, a degree of closeness measurement is defined that correlates to a number of synonyms common between the search terms of a prior search and the search terms of a new document search.

US Patent:

20080040343, Feb 14, 2008

Filed:

Aug 14, 2006

Appl. No.:

11/503698

Inventors:

Carolyn A. Brodie - Briarcliff NY, US
Clare-Marie Karat - Greenwich CT, US
John Karat - Greenwich CT, US
Peter Kenneth Malkin - Ardsley NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 17/30

US Classification:

707 6

Abstract:

A method and system enable a user to develop domain-specific policy workbench. Domains may include, but are not limited to security, autonomic computing, workload management and systems management. The method and system in one aspect determines syntax of a policy in a selected domain and creates an instance of policy workbench specific to the selected domain. In one aspect, the instance of policy workbench includes at least machine-readable encodings of the selected policy and associated mapping. The instance of policy workbench also includes a compliance auditing tool enabled to check events logged at a target system against the selected policy and associated mapping to determine if one or more policy rules have been complied with. In another aspect, domain-specific policy workbench creation machine is provided that automatically creates an instance of domain-specific policy workbench.

US Patent:

20090106815, Apr 23, 2009

Filed:

Oct 23, 2007

Appl. No.:

11/877208

Inventors:

Carolyn A. Brodie - Briarcliff NY, US
Richard H. Guski - Red Hook NY, US
Clare-Marie N. Karat - Greenwich CT, US
John Karat - Greenwich CT, US
Peter K. Malkin - Ardsley NY, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 21/00

US Classification:

726 1

Abstract:

A method and system are disclosed for mapping a privacy policy into classification labels for controlling access to information on a computer system or network, said privacy policy including one or more rules for determining which users can access said information. The method comprises the steps of parsing said one or more rules of the privacy policy; sorting the one or more rules into one or more sets; and, for each set of rules, (i) forming a logical statement from the rules of said each set, and (ii) using said logical statement to create associated privacy labels that allow access to said information. In a preferred embodiment, each of the rules is associated with a user category, a data category and a purpose category; and the rules in each set of rules have the same user category, the same data category, and the same purpose category.