Patents by Inventor Christopher Y. Choi

Christopher Y. Choi has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).

  • Patent number: 9729642
    Abstract: A technique to at least partial transfer an active network communication session associated with a server and an authenticated user communicating through a first device. The at least partial transfer includes the following actions (not necessarily in the following order): (i) recording the network communication session on an inline network device; (ii) associating the network communication session with the second device on the inline network device; and (iii) sending session continuation information from the inline network device to at least the second device and/or the server. The first device is in data communication with the inline network device during at least a portion of the recording step. The session continuation information sent at the sending step includes information enabling the user to continue the active network communication session through the second device.
    Type: Grant
    Filed: May 24, 2013
    Date of Patent: August 8, 2017
    Assignee: International Business Machines Corporation
    Inventors: Paul A. Ashley, Christopher Y. Choi, John W. Court, Simon W. Gee
  • Patent number: 9692765
    Abstract: Embodiments of the present invention disclose a method, computer program product, and system for determining role-based access. In one embodiment, the method includes receiving an audit event for a restricted resource and a first user id associated with the audit event. The method further includes determining based at least in part on the audit event, a historical reference, the historical reference including at least one audit event associated with at least one user id. The method further includes determining access activity associated with the first user id. The method further includes determining based at least in part on the historical reference and the access activity, at least one recommended role for the first user id.
    Type: Grant
    Filed: August 21, 2014
    Date of Patent: June 27, 2017
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Rune H. Larsen, David P. Moore, Franz Wolfhagen
  • Publication number: 20160057150
    Abstract: Embodiments of the present invention disclose a method, computer program product, and system for determining role-based access. In one embodiment, the method includes receiving an audit event for a restricted resource and a first user id associated with the audit event. The method further includes determining based at least in part on the audit event, a historical reference, the historical reference including at least one audit event associated with at least one user id. The method further includes determining access activity associated with the first user id. The method further includes determining based at least in part on the historical reference and the access activity, at least one recommended role for the first user id.
    Type: Application
    Filed: August 21, 2014
    Publication date: February 25, 2016
    Inventors: Christopher Y. Choi, Rune H. Larsen, David P. Moore, Franz Wolfhagen
  • Patent number: 9021594
    Abstract: A computing device receives requests for approval of a plurality of access entitlements, which includes respective identity accounts, each associated with security intelligence information. The computing device determines risk factors for each respective identity account and associated security intelligence information, and determines a risk level for each of the plurality of access entitlements based at least in part on the risk factors. The computing device groups the plurality of access entitlements based on the risk level determined for each of the plurality of access entitlements. The computing device determines if the risk level of a group is low-risk based on the risk level of the plurality of access entitlements of the group, and in response to determining the risk level of the group is low risk, the computing device enables approval of the plurality of access entitlements of the group.
    Type: Grant
    Filed: June 19, 2013
    Date of Patent: April 28, 2015
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Neil I. Readshaw
  • Publication number: 20140380484
    Abstract: A computing device receives requests for approval of a plurality of access entitlements, which includes respective identity accounts, each associated with security intelligence information. The computing device determines risk factors for each respective identity account and associated security intelligence information, and determines a risk level for each of the plurality of access entitlements based at least in part on the risk factors. The computing device groups the plurality of access entitlements based on the risk level determined for each of the plurality of access entitlements. The computing device determines if the risk level of a group is low-risk based on the risk level of the plurality of access entitlements of the group, and in response to determining the risk level of the group is low risk, the computing device enables approval of the plurality of access entitlements of the group.
    Type: Application
    Filed: June 19, 2013
    Publication date: December 25, 2014
    Inventors: Christopher Y. Choi, Neil I. Readshaw
  • Publication number: 20140351370
    Abstract: A technique to at least partial transfer an active network communication session associated with a server and an authenticated user communicating through a first device. The at least partial transfer includes the following actions (not necessarily in the following order): (i) recording the network communication session on an inline network device; (ii) associating the network communication session with the second device on the inline network device; and (iii) sending session continuation information from the inline network device to at least the second device and/or the server. The first device is in data communication with the inline network device during at least a portion of the recording step. The session continuation information sent at the sending step includes information enabling the user to continue the active network communication session through the second device.
    Type: Application
    Filed: May 24, 2013
    Publication date: November 27, 2014
    Applicant: International Business Machines Corporation
    Inventors: Paul A. Ashley, Christopher Y. Choi, John W. Court, Simon W. Gee
  • Patent number: 8627405
    Abstract: A user provisioning system is extended to enable account reconciliation to occur in conjunction with a provisioning request. In response to a user provisioning request, a determination is made whether the user provisioning request is to be extended by including a reconciliation request. If so, the reconciliation request is piggy-backed on top of the provisioning request. This approach enables the reconciliation operation to be scoped to just the particular user account that is the subject to the provisioning operation, and it enables reconciliation to be carried out much more frequently as compared to the periodic, batch-oriented approach of prior techniques.
    Type: Grant
    Filed: October 2, 2012
    Date of Patent: January 7, 2014
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Neil I. Readshaw
  • Patent number: 8600992
    Abstract: Mechanisms for correlating reported problem data from a plurality of sources of information are provided. A report of a problem in a computer system is received to thereby generate a reported problem in a problem management system. Data is collected from a plurality of sources of information in accordance with data collection rules. Content classification is performed on the collected data to classify the collected data into pre-determined classes of collected data in accordance with classification rules. Correlation of the classified data into sets of correlated data in accordance with correlation rules is performed. Each set of correlated data corresponds to a different reported problem in the problem management system. A representation of the reported problem in the problem management system is updated based on a set of correlated data corresponding to the reported problem and classifications of data within the set of correlated data.
    Type: Grant
    Filed: August 17, 2011
    Date of Patent: December 3, 2013
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Neil I. Readshaw
  • Patent number: 8468585
    Abstract: An identity management (“IdM”) system can change the credentials at certain intervals. If credentials change, there is no way for an application that uses the credentials to know that the credentials have changed because the application dependency relationships are unknown. When service account credentials change, credentials are typically manually updated for each dependent application. Some embodiments of the inventive subject matter allow IdM systems to track application dependencies for service accounts. The IdM systems can detect when service account credentials change and automatically notify dependent applications of the new service account credentials.
    Type: Grant
    Filed: January 5, 2009
    Date of Patent: June 18, 2013
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Publication number: 20130046764
    Abstract: Mechanisms for correlating reported problem data from a plurality of sources of information are provided. A report of a problem in a computer system is received to thereby generate a reported problem in a problem management system. Data is collected from a plurality of sources of information in accordance with data collection rules. Content classification is performed on the collected data to classify the collected data into pre-determined classes of collected data in accordance with classification rules. Correlation of the classified data into sets of correlated data in accordance with correlation rules is performed. Each set of correlated data corresponds to a different reported problem in the problem management system. A representation of the reported problem in the problem management system is updated based on a set of correlated data corresponding to the reported problem and classifications of data within the set of correlated data.
    Type: Application
    Filed: August 17, 2011
    Publication date: February 21, 2013
    Applicant: INTERNATIONAL BUSINESS MACHINES CORPORATION
    Inventors: Christopher Y. Choi, Neil I. Readshaw
  • Patent number: 8229765
    Abstract: A drug interaction utility can retrieve the patient's current medications from a medication information card on the smart card by interacting with an identity selector on the provider's computer. The identity selector can transmit the current medications to the drug interaction utility without disclosing any information about the current medications to the provider and without disclosing any information identifying the patient to the drug interaction utility.
    Type: Grant
    Filed: April 23, 2009
    Date of Patent: July 24, 2012
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Patent number: 8161108
    Abstract: An online collaboration system can access data in one or more skills repositories to search for participants with indicated skills and automatically display participants' skill information during online collaborations. Searching for participants by skill allows individuals most likely to add value to a discussion to be identified and invited to an online collaboration. Displaying skill information can facilitate focused interaction leading to a more productive online collaboration.
    Type: Grant
    Filed: January 5, 2009
    Date of Patent: April 17, 2012
    Assignee: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Publication number: 20100274586
    Abstract: A drug interaction utility can retrieve the patient's current medications from a medication information card on the smart card by interacting with an identity selector on the provider's computer. The identity selector can transmit the current medications to the drug interaction utility without disclosing any information about the current medications to the provider and without disclosing any information identifying tile patient to the drug interaction utility.
    Type: Application
    Filed: April 23, 2009
    Publication date: October 28, 2010
    Applicant: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Publication number: 20100174780
    Abstract: An online collaboration system can access data in one or more skills repositories to search for participants with indicated skills and automatically display participants' skill information during online collaborations. Searching for participants by skill allows individuals most likely to add value to a discussion to be identified and invited to an online collaboration. Displaying skill information can facilitate focused interaction leading to a more productive online collaboration.
    Type: Application
    Filed: January 5, 2009
    Publication date: July 8, 2010
    Applicant: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Publication number: 20100175115
    Abstract: An identity management (“IdM”) system can change the credentials at certain intervals. If credentials change, there is no way for an application that uses the credentials to know that the credentials have changed because the application dependency relationships are unknown. When service account credentials change, credentials are typically manually updated for each dependent application. Some embodiments of the inventive subject matter allow IdM systems to track application dependencies for service accounts. The IdM systems can detect when service account credentials change and automatically notify dependent applications of the new service account credentials.
    Type: Application
    Filed: January 5, 2009
    Publication date: July 8, 2010
    Applicant: International Business Machines Corporation
    Inventors: Christopher Y. Choi, Christopher J. Hockings, Neil I. Readshaw
  • Patent number: 7479790
    Abstract: A capacitive plate dielectrometer method and system is provided that is used to measure dielectric properties, such as permittivity, of a small sample test material at a low frequency. The capacitive plate dielectrometer method and system calibrates the capacitive plate dielectrometer with a plurality of standard dielectric materials and the sample test material is rotated in the capacitive plate dielectrometer to allow measurement of several electric field directions.
    Type: Grant
    Filed: November 9, 2006
    Date of Patent: January 20, 2009
    Assignee: The Boeing Company
    Inventor: Christopher Y. Choi
  • Publication number: 20080111559
    Abstract: A capacitive plate dielectrometer method and system is provided that is used to measure dielectric properties, such as permittivity, of a small sample test material at a low frequency. The capacitive plate dielectrometer method and system calibrates the capacitive plate dielectrometer with a plurality of standard dielectric materials and the sample test material is rotated in the capacitive plate dielectrometer to allow measurement of several electric field directions.
    Type: Application
    Filed: November 9, 2006
    Publication date: May 15, 2008
    Inventor: Christopher Y. Choi
  • Publication number: 20020008167
    Abstract: A ground based remote sensing system for use in conjunction with agricultural irrigation systems. The ground based remote sensing system includes a sensor package mounted to a carriage for movement along a track attached to the agricultural irrigation system. The track is triangular in cross section and includes springs between abutting sections so that travel of the carriage along the track will not be compromised by misalignment between the abutting sections. The sensor package is mounted to the carriage by a mount which acts to ensure that the sensor package remains in a predetermined orientation with respect to the agricultural crop from which data is being gathered. The mount also includes an inclinometer to permit correction of agricultural data gathering errors due to misalignment of the sensor package with respect to the agricultural crop. The ground based remote sensing system also includes conducting rails to transmit energy from a speed control circuit to the carriage motor.
    Type: Application
    Filed: April 24, 2001
    Publication date: January 24, 2002
    Inventors: Julio A. Haberland, Charles W. DeFer, Peter M. Waller, Christopher Y. Choi, Paul D. Colaizzi, Michael A. Kostrzewski