Patents by Inventor Einar Lueck
Einar Lueck has filed for patents to protect the following inventions. This listing includes patent applications that are pending as well as patents that have already been granted by the United States Patent and Trademark Office (USPTO).
-
Patent number: 10706039Abstract: The present disclosure relates to a method for processing data in a database engine. The method includes storing a first instance of a first table in the database engine in plaintext. Encryption information about encryption methods and encryption keys of at least one predefined column of the first table may be maintained. In response to data changes in the column, first log entries for the data changes may be written in plaintext. The data changes may be encrypted by an encryption component using the encryption information. This results in encrypted data changes. Second log entries for the encrypted data changes may be written and applied to a second instance of the first table. The second instance of the first table is stored at a further database engine.Type: GrantFiled: May 10, 2019Date of Patent: July 7, 2020Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Felix Beier, Nicole Finnie, Namik Hrle, Einar Lueck
-
Patent number: 10698883Abstract: The present disclosure relates to a method for processing data in a database engine. The method includes storing a first instance of a first table in the database engine in plaintext. Encryption information about encryption methods and encryption keys of at least one predefined column of the first table may be maintained. In response to data changes in the column, first log entries for the data changes may be written in plaintext. The data changes may be encrypted by an encryption component using the encryption information. This results in encrypted data changes. Second log entries for the encrypted data changes may be written and applied to a second instance of the first table. The second instance of the first table is stored at a further database engine.Type: GrantFiled: October 25, 2017Date of Patent: June 30, 2020Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Felix Beier, Nicole Finnie, Namik Hrle, Einar Lueck
-
Publication number: 20200153893Abstract: A source IT-infrastructure hosts a composite application including multiple functional modules connected to each other via communication links. An abstract pattern includes first nodes and first links representing the functional modules and communication links and lacks resource-related data enabling a deployment engine to instantiate a resource for providing a runtime environment. A target IT-infrastructure has assigned a resource catalog including, for each resource available in the target IT-infrastructure, a specification of the resource's capabilities, and includes second nodes and links, each second node being a representation of one or more of the resources of the target IT-infrastructure and including an indication of the capabilities of one or more resources represented by the second node. The first nodes and links of the abstract pattern are iteratively supplemented by the second nodes and second links.Type: ApplicationFiled: January 16, 2020Publication date: May 14, 2020Inventors: Utz Bacher, Einar Lueck, Stefan Raspl, Thomas Spatzier
-
Publication number: 20200151195Abstract: A computer-implemented method for controlling a system is provided. The system includes a source database and a target database. The system can asynchronously replicate data changes of at least one part of the source database to the target database. This asynchronous replication includes evaluating, by a capture engine, a log of the source database for identifying any un-replicated data changes of the at least one part of the source database, transferring the identified data changes to an apply engine, and applying, by the apply engine, the transferred data changes to the target database.Type: ApplicationFiled: January 3, 2020Publication date: May 14, 2020Inventors: Andreas Brodt, Einar Lueck, Daniel Martin, Sabine Perathoner-Tschaffler
-
Patent number: 10581955Abstract: A source IT-infrastructure hosts a composite application including multiple functional modules connected to each other via communication links. An abstract pattern includes first nodes and first links representing the functional modules and communication links and lacks resource-related data enabling a deployment engine to instantiate a resource for providing a runtime environment. A target IT-infrastructure has assigned a resource catalog including, for each resource available in the target IT-infrastructure, a specification of the resource's capabilities, and includes second nodes and links, each second node being a representation of one or more of the resources of the target IT-infrastructure and including an indication of the capabilities of one or more resources represented by the second node. The first nodes and links of the abstract pattern are iteratively supplemented by the second nodes and second links.Type: GrantFiled: December 6, 2017Date of Patent: March 3, 2020Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Utz Bacher, Einar Lueck, Stefan Raspl, Thomas Spatzier
-
Patent number: 10552451Abstract: A computer-implemented method for controlling a system is provided. The system includes a source database and a target database. The system can asynchronously replicate data changes of at least one part of the source database to the target database. This asynchronous replication includes evaluating, by a capture engine, a log of the source database for identifying any un-replicated data changes of the at least one part of the source database, transferring the identified data changes to an apply engine, and applying, by the apply engine, the transferred data changes to the target database.Type: GrantFiled: December 3, 2015Date of Patent: February 4, 2020Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Andreas Brodt, Einar Lueck, Daniel Martin, Sabine Perathoner-Tschaffler
-
Publication number: 20200034365Abstract: The invention relates to computer-implemented method for updating a target table with changes introduced into a source table. New data records are stored into partitions of the source table. An incremental update module copies the new data records from the source table into the target table, thereby assigning a new target partition ID contained within a first value domain to each copied data record. A view specifies a set of visible partition IDs as a union of the first value domain and of a current target partition ID set and allows the execution of database queries selectively on target table partitions having assigned a target partition ID that is element of the visible partition ID set. A batch update module performs an atomic batch update operation that comprises copying partitions of the source table into a respective new partition in the target table.Type: ApplicationFiled: June 24, 2019Publication date: January 30, 2020Inventors: Daniel Martin, Knut Stolze, Jens Müller, Sabine Perathoner-Tschaffler, Felix Beier, Einar Lueck
-
Patent number: 10417051Abstract: An order processing system can include an order processing container, a factory registry, a relationship registry, and synchronization function component. The order processing system can handle orders, which are build plans including a set of tasks. The tasks can specify programmatic actions which may include creation, deletion, and modification of resources and resource topologies. The order processing container can be central engine that programmatically drives order processing actions. The factory registry can support a creation and deletion of resource instances in a resource topology defined by at least one order. The relationship registry can maintain relationships among resources. The synchronization function component can permit transparent usage of shared resources in accordance with shared usage resource topology parameters specified within processed orders.Type: GrantFiled: May 23, 2008Date of Patent: September 17, 2019Assignee: International Business Machines CorporationInventors: Michael M. Behrendt, Gerd Breiter, Joachim Hagmeier, Einar Lueck, Ruediger Maass, Steffen Rost, Thomas Spatzier
-
Publication number: 20190266147Abstract: The present disclosure relates to a method for processing data in a database engine. The method includes storing a first instance of a first table in the database engine in plaintext. Encryption information about encryption methods and encryption keys of at least one predefined column of the first table may be maintained. In response to data changes in the column, first log entries for the data changes may be written in plaintext. The data changes may be encrypted by an encryption component using the encryption information. This results in encrypted data changes. Second log entries for the encrypted data changes may be written and applied to a second instance of the first table. The second instance of the first table is stored at a further database engine.Type: ApplicationFiled: May 10, 2019Publication date: August 29, 2019Inventors: Felix Beier, Nicole Finnie, Namik Hrle, Einar Lueck
-
Publication number: 20190121887Abstract: The present disclosure relates to a method for processing data in a database engine. The method includes storing a first instance of a first table in the database engine in plaintext. Encryption information about encryption methods and encryption keys of at least one predefined column of the first table may be maintained. In response to data changes in the column, first log entries for the data changes may be written in plaintext. The data changes may be encrypted by an encryption component using the encryption information. This results in encrypted data changes. Second log entries for the encrypted data changes may be written and applied to a second instance of the first table. The second instance of the first table is stored at a further database engine.Type: ApplicationFiled: October 25, 2017Publication date: April 25, 2019Inventors: Felix Beier, Nicole Finnie, Namik Hrle, Einar Lueck
-
Patent number: 9967325Abstract: A source IT-infrastructure hosts a composite application including multiple functional modules connected to each other via communication links. An abstract pattern includes first nodes and first links representing the functional modules and communication links and lacks resource-related data enabling a deployment engine to instantiate a resource for providing a runtime environment. A target IT-infrastructure has assigned a resource catalog including, for each resource available in the target IT-infrastructure, a specification of the resource's capabilities, and includes second nodes and links, each second node being a representation of one or more of the resources of the target IT-infrastructure and including an indication of the capabilities of one or more resources represented by the second node. The first nodes and links of the abstract pattern are iteratively supplemented by the second nodes and second links.Type: GrantFiled: October 7, 2015Date of Patent: May 8, 2018Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Utz Bacher, Einar Lueck, Stefan Raspl, Thomas Spatzier
-
Publication number: 20180109593Abstract: A source IT-infrastructure hosts a composite application including multiple functional modules connected to each other via communication links. An abstract pattern includes first nodes and first links representing the functional modules and communication links and lacks resource-related data enabling a deployment engine to instantiate a resource for providing a runtime environment. A target IT-infrastructure has assigned a resource catalog including, for each resource available in the target IT-infrastructure, a specification of the resource's capabilities, and includes second nodes and links, each second node being a representation of one or more of the resources of the target IT-infrastructure and including an indication of the capabilities of one or more resources represented by the second node. The first nodes and links of the abstract pattern are iteratively supplemented by the second nodes and second links.Type: ApplicationFiled: December 6, 2017Publication date: April 19, 2018Inventors: Utz Bacher, Einar Lueck, Stefan Raspl, Thomas Spatzier
-
Publication number: 20170322993Abstract: A computer-implemented method for controlling a system is provided. The system includes a source database and a target database. The system can asynchronously replicate data changes of at least one part of the source database to the target database. This asynchronous replication includes evaluating, by a capture engine, a log of the source database for identifying any un-replicated data changes of the at least one part of the source database, transferring the identified data changes to an apply engine, and applying, by the apply engine, the transferred data changes to the target database.Type: ApplicationFiled: December 3, 2015Publication date: November 9, 2017Inventors: Andreas Brodt, Einar Lueck, Daniel Martin, Sabine Perathoner-Tschaffler
-
Patent number: 9769175Abstract: Accessing privileged objects in a server environment. A privileged object is associated with an application comprising at least one process resource and a corresponding semi-privileged instruction. The association is filed in an entity of an operating system kernel. A central processing unit (CPU) performs an authorization check if the semi-privileged instruction is issued and attempts to access the privileged object. The CPU executes the semi-privileged instruction and grants access to the privileged object if the operating system kernel has issued the semi-privileged instruction; or accesses the entity if a process resource of the application has issued the semi-privileged instruction to determine authorization of the process resource to access the privileged object.Type: GrantFiled: October 5, 2015Date of Patent: September 19, 2017Assignee: International Business Machines CorporationInventors: Utz Bacher, Frank Blaschka, Einar Lueck, Christoph Raisch
-
Patent number: 9690947Abstract: Method of processing a guest event in a hypervisor-controlled system, which includes: triggering a first firmware service specific for the guest event; the firmware processing information associated with the guest event, and presenting only a subset of the information of a guest state and memory in decrypted form to a hypervisor, where the subset of the information is selected to allow the hypervisor to process the guest event; the firmware retaining a part of the information of the guest state and memory not sent to the hypervisor; the hypervisor processing the guest event based on the received subset of the information, and sending a process result to the firmware, triggering a second firmware service; the firmware processing the received process result together with the part of the information of the guest state and memory not sent to the hypervisor, and generates and performs a state and/or memory modification.Type: GrantFiled: March 14, 2014Date of Patent: June 27, 2017Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Utz Bacher, Reinhard Buendgen, Einar Lueck
-
Patent number: 9529616Abstract: A process can be scheduled between first and second hosts that using a virtual file system that is shared between the hosts can be used. The process, running on a first hypervisor of the first host, can be scheduled to run on a second hypervisor of the second host. A file can be created that includes the data content of the process address space for the file. The file can be mapped address space of the virtual file system. Data from the physical memory of the first host can be transferred to physical memory of the second host using page fault routines.Type: GrantFiled: December 10, 2013Date of Patent: December 27, 2016Assignee: International Business Machines CorporationInventors: Christian Borntraeger, Heiko Carstens, Dominik Dingel, Matthias Klein, Einar Lueck
-
Patent number: 9529618Abstract: A process can be scheduled between first and second hosts that using a virtual file system that is shared between the hosts can be used. The process, running on a first hypervisor of the first host, can be scheduled to run on a second hypervisor of the second host. A file can be created that includes the data content of the process address space for the file. The file can be mapped address space of the virtual file system. Data from the physical memory of the first host can be transferred to physical memory of the second host using page fault routines.Type: GrantFiled: June 17, 2014Date of Patent: December 27, 2016Assignee: International Business Machines CorporationInventors: Christian Borntraeger, Heiko Carstens, Dominik Dingel, Matthias Klein, Einar Lueck
-
Patent number: 9418234Abstract: Embodiments of the invention relate to providing isolated entropy elements for a virtual machine to increase entropy in a computing environment. At least one virtual machine is deployed on a hypervisor. The hypervisor generates entropy elements based on triggers related to a virtual machine. Identifiers are assigned to the entropy elements based on the triggers and the virtual machine. Use of the entropy elements is restricted for the virtual machine based on the assigned identifiers. The increase in entropy through providing isolated entropy elements for a virtual machine deployed on a hypervisor reduces the success of external attacks on data residing within the computing environment.Type: GrantFiled: October 3, 2014Date of Patent: August 16, 2016Assignee: GLOBALFOUNDRIES INC.Inventors: Utz Bacher, Einar Lueck, Stefan Raspl, Thomas Spatzier
-
Publication number: 20160148001Abstract: Method of processing a guest event in a hypervisor-controlled system, which includes: triggering a first firmware service specific for the guest event; the firmware processing information associated with the guest event, and presenting only a subset of the information of a guest state and memory in decrypted form to a hypervisor, where the subset of the information is selected to allow the hypervisor to process the guest event; the firmware retaining a part of the information of the guest state and memory not sent to the hypervisor; the hypervisor processing the guest event based on the received subset of the information, and sending a process result to the firmware, triggering a second firmware service; the firmware processing the received process result together with the part of the information of the guest state and memory not sent to the hypervisor, and generates and performs a state and/or memory modification.Type: ApplicationFiled: March 14, 2014Publication date: May 26, 2016Inventors: Utz BACHER, Reinhard BUENDGEN, Einar LUECK
-
Patent number: 9342360Abstract: A virtual machine (VM) migration from a source virtual machine monitor (VMM) to a destination VMM on a computer system. Each of the VMMs includes virtualization software, and one or more VMs are executed in each of the VMMs. The virtualization software allocates hardware resources in a form of virtual resources for the concurrent execution of one or more VMs and the virtualization software. A portion of a memory of the hardware resources includes hardware memory segments. A first portion of the memory segments is assigned to a source logical partition and a second portion is assigned to a destination logical partition. The source VMM operates in the source logical partition and the destination VMM operates in the destination logical partition. The first portion of the memory segments is mapped into a source VMM memory, and the second portion of the memory segments is mapped into a destination VMM memory.Type: GrantFiled: May 1, 2015Date of Patent: May 17, 2016Assignee: INTERNATIONAL BUSINESS MACHINES CORPORATIONInventors: Utz Bacher, Reinhard Buendgen, Einar Lueck, Angel Nunez Mencias