Patents by Inventor Christopher Y. Choi
Christopher Y. Choi has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 9729642Abstract: A technique to at least partial transfer an active network communication session associated with a server and an authenticated user communicating through a first device. The at least partial transfer includes the following actions (not necessarily in the following order): (i) recording the network communication session on an inline network device; (ii) associating the network communication session with the second device on the inline network device; and (iii) sending session continuation information from the inline network device to at least the second device and/or the server. The first device is in data communication with the inline network device during at least a portion of the recording step. The session continuation information sent at the sending step includes information enabling the user to continue the active network communication session through the second device.Type: GrantFiled: May 24, 2013Date of Patent: August 8, 2017Assignee: International Business Machines CorporationInventors: Paul A. Ashley, Christopher Y. Choi, John W. Court, Simon W. Gee
-
Patent number: 9692765Abstract: Embodiments of the present invention disclose a method, computer program product, and system for determining role-based access. In one embodiment, the method includes receiving an audit event for a restricted resource and a first user id associated with the audit event. The method further includes determining based at least in part on the audit event, a historical reference, the historical reference including at least one audit event associated with at least one user id. The method further includes determining access activity associated with the first user id. The method further includes determining based at least in part on the historical reference and the access activity, at least one recommended role for the first user id.Type: GrantFiled: August 21, 2014Date of Patent: June 27, 2017Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Rune H. Larsen, David P. Moore, Franz Wolfhagen
-
Publication number: 20160057150Abstract: Embodiments of the present invention disclose a method, computer program product, and system for determining role-based access. In one embodiment, the method includes receiving an audit event for a restricted resource and a first user id associated with the audit event. The method further includes determining based at least in part on the audit event, a historical reference, the historical reference including at least one audit event associated with at least one user id. The method further includes determining access activity associated with the first user id. The method further includes determining based at least in part on the historical reference and the access activity, at least one recommended role for the first user id.Type: ApplicationFiled: August 21, 2014Publication date: February 25, 2016Inventors: Christopher Y. Choi, Rune H. Larsen, David P. Moore, Franz Wolfhagen
-
Patent number: 9021594Abstract: A computing device receives requests for approval of a plurality of access entitlements, which includes respective identity accounts, each associated with security intelligence information. The computing device determines risk factors for each respective identity account and associated security intelligence information, and determines a risk level for each of the plurality of access entitlements based at least in part on the risk factors. The computing device groups the plurality of access entitlements based on the risk level determined for each of the plurality of access entitlements. The computing device determines if the risk level of a group is low-risk based on the risk level of the plurality of access entitlements of the group, and in response to determining the risk level of the group is low risk, the computing device enables approval of the plurality of access entitlements of the group.Type: GrantFiled: June 19, 2013Date of Patent: April 28, 2015Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Neil I. Readshaw
-
Publication number: 20140380484Abstract: A computing device receives requests for approval of a plurality of access entitlements, which includes respective identity accounts, each associated with security intelligence information. The computing device determines risk factors for each respective identity account and associated security intelligence information, and determines a risk level for each of the plurality of access entitlements based at least in part on the risk factors. The computing device groups the plurality of access entitlements based on the risk level determined for each of the plurality of access entitlements. The computing device determines if the risk level of a group is low-risk based on the risk level of the plurality of access entitlements of the group, and in response to determining the risk level of the group is low risk, the computing device enables approval of the plurality of access entitlements of the group.Type: ApplicationFiled: June 19, 2013Publication date: December 25, 2014Inventors: Christopher Y. Choi, Neil I. Readshaw
-
Publication number: 20140351370Abstract: A technique to at least partial transfer an active network communication session associated with a server and an authenticated user communicating through a first device. The at least partial transfer includes the following actions (not necessarily in the following order): (i) recording the network communication session on an inline network device; (ii) associating the network communication session with the second device on the inline network device; and (iii) sending session continuation information from the inline network device to at least the second device and/or the server. The first device is in data communication with the inline network device during at least a portion of the recording step. The session continuation information sent at the sending step includes information enabling the user to continue the active network communication session through the second device.Type: ApplicationFiled: May 24, 2013Publication date: November 27, 2014Applicant: International Business Machines CorporationInventors: Paul A. Ashley, Christopher Y. Choi, John W. Court, Simon W. Gee
-
Patent number: 8627405Abstract: A user provisioning system is extended to enable account reconciliation to occur in conjunction with a provisioning request. In response to a user provisioning request, a determination is made whether the user provisioning request is to be extended by including a reconciliation request. If so, the reconciliation request is piggy-backed on top of the provisioning request. This approach enables the reconciliation operation to be scoped to just the particular user account that is the subject to the provisioning operation, and it enables reconciliation to be carried out much more frequently as compared to the periodic, batch-oriented approach of prior techniques.Type: GrantFiled: October 2, 2012Date of Patent: January 7, 2014Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Neil I. Readshaw
-
Patent number: 8600992Abstract: Mechanisms for correlating reported problem data from a plurality of sources of information are provided. A report of a problem in a computer system is received to thereby generate a reported problem in a problem management system. Data is collected from a plurality of sources of information in accordance with data collection rules. Content classification is performed on the collected data to classify the collected data into pre-determined classes of collected data in accordance with classification rules. Correlation of the classified data into sets of correlated data in accordance with correlation rules is performed. Each set of correlated data corresponds to a different reported problem in the problem management system. A representation of the reported problem in the problem management system is updated based on a set of correlated data corresponding to the reported problem and classifications of data within the set of correlated data.Type: GrantFiled: August 17, 2011Date of Patent: December 3, 2013Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Neil I. Readshaw
-
Patent number: 8468585Abstract: An identity management (“IdM”) system can change the credentials at certain intervals. If credentials change, there is no way for an application that uses the credentials to know that the credentials have changed because the application dependency relationships are unknown. When service account credentials change, credentials are typically manually updated for each dependent application. Some embodiments of the inventive subject matter allow IdM systems to track application dependencies for service accounts. The IdM systems can detect when service account credentials change and automatically notify dependent applications of the new service account credentials.Type: GrantFiled: January 5, 2009Date of Patent: June 18, 2013Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Publication number: 20130046764Abstract: Mechanisms for correlating reported problem data from a plurality of sources of information are provided. A report of a problem in a computer system is received to thereby generate a reported problem in a problem management system. Data is collected from a plurality of sources of information in accordance with data collection rules. Content classification is performed on the collected data to classify the collected data into pre-determined classes of collected data in accordance with classification rules. Correlation of the classified data into sets of correlated data in accordance with correlation rules is performed. Each set of correlated data corresponds to a different reported problem in the problem management system. A representation of the reported problem in the problem management system is updated based on a set of correlated data corresponding to the reported problem and classifications of data within the set of correlated data.Type: ApplicationFiled: August 17, 2011Publication date: February 21, 2013Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Christopher Y. Choi, Neil I. Readshaw
-
Patent number: 8229765Abstract: A drug interaction utility can retrieve the patient's current medications from a medication information card on the smart card by interacting with an identity selector on the provider's computer. The identity selector can transmit the current medications to the drug interaction utility without disclosing any information about the current medications to the provider and without disclosing any information identifying the patient to the drug interaction utility.Type: GrantFiled: April 23, 2009Date of Patent: July 24, 2012Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Patent number: 8161108Abstract: An online collaboration system can access data in one or more skills repositories to search for participants with indicated skills and automatically display participants' skill information during online collaborations. Searching for participants by skill allows individuals most likely to add value to a discussion to be identified and invited to an online collaboration. Displaying skill information can facilitate focused interaction leading to a more productive online collaboration.Type: GrantFiled: January 5, 2009Date of Patent: April 17, 2012Assignee: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Publication number: 20100274586Abstract: A drug interaction utility can retrieve the patient's current medications from a medication information card on the smart card by interacting with an identity selector on the provider's computer. The identity selector can transmit the current medications to the drug interaction utility without disclosing any information about the current medications to the provider and without disclosing any information identifying tile patient to the drug interaction utility.Type: ApplicationFiled: April 23, 2009Publication date: October 28, 2010Applicant: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Publication number: 20100174780Abstract: An online collaboration system can access data in one or more skills repositories to search for participants with indicated skills and automatically display participants' skill information during online collaborations. Searching for participants by skill allows individuals most likely to add value to a discussion to be identified and invited to an online collaboration. Displaying skill information can facilitate focused interaction leading to a more productive online collaboration.Type: ApplicationFiled: January 5, 2009Publication date: July 8, 2010Applicant: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Publication number: 20100175115Abstract: An identity management (“IdM”) system can change the credentials at certain intervals. If credentials change, there is no way for an application that uses the credentials to know that the credentials have changed because the application dependency relationships are unknown. When service account credentials change, credentials are typically manually updated for each dependent application. Some embodiments of the inventive subject matter allow IdM systems to track application dependencies for service accounts. The IdM systems can detect when service account credentials change and automatically notify dependent applications of the new service account credentials.Type: ApplicationFiled: January 5, 2009Publication date: July 8, 2010Applicant: International Business Machines CorporationInventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
-
Patent number: 7479790Abstract: A capacitive plate dielectrometer method and system is provided that is used to measure dielectric properties, such as permittivity, of a small sample test material at a low frequency. The capacitive plate dielectrometer method and system calibrates the capacitive plate dielectrometer with a plurality of standard dielectric materials and the sample test material is rotated in the capacitive plate dielectrometer to allow measurement of several electric field directions.Type: GrantFiled: November 9, 2006Date of Patent: January 20, 2009Assignee: The Boeing CompanyInventor: Christopher Y. Choi
-
Publication number: 20080111559Abstract: A capacitive plate dielectrometer method and system is provided that is used to measure dielectric properties, such as permittivity, of a small sample test material at a low frequency. The capacitive plate dielectrometer method and system calibrates the capacitive plate dielectrometer with a plurality of standard dielectric materials and the sample test material is rotated in the capacitive plate dielectrometer to allow measurement of several electric field directions.Type: ApplicationFiled: November 9, 2006Publication date: May 15, 2008Inventor: Christopher Y. Choi
-
Publication number: 20020008167Abstract: A ground based remote sensing system for use in conjunction with agricultural irrigation systems. The ground based remote sensing system includes a sensor package mounted to a carriage for movement along a track attached to the agricultural irrigation system. The track is triangular in cross section and includes springs between abutting sections so that travel of the carriage along the track will not be compromised by misalignment between the abutting sections. The sensor package is mounted to the carriage by a mount which acts to ensure that the sensor package remains in a predetermined orientation with respect to the agricultural crop from which data is being gathered. The mount also includes an inclinometer to permit correction of agricultural data gathering errors due to misalignment of the sensor package with respect to the agricultural crop. The ground based remote sensing system also includes conducting rails to transmit energy from a speed control circuit to the carriage motor.Type: ApplicationFiled: April 24, 2001Publication date: January 24, 2002Inventors: Julio A. Haberland, Charles W. DeFer, Peter M. Waller, Christopher Y. Choi, Paul D. Colaizzi, Michael A. Kostrzewski