Abstract: A computer-implemented method for migrating a source container with a running application to a target container may be provided. The method includes providing a source container motion daemon being executed in the source container management system, and a target container motion daemon being executed in the target container management system, and creating a host container hosting an encapsulated container environment in the target container management system. The host container is executing a host container motion daemon and the target container. The method also includes connecting a container motion controller to the source container motion daemon, the target container motion daemon and the host container motion daemon, and copying content of a source memory of the source container to a target memory via the source container motion daemon and the host container motion daemon under control of the container motion controller.

Abstract: A computer-implemented method for migrating a source container with a running application to a target container may be provided. The method includes providing a source container motion daemon being executed in the source container management system, and a target container motion daemon being executed in the target container management system, and creating a host container hosting an encapsulated container environment in the target container management system. The host container is executing a host container motion daemon and the target container. The method also includes connecting a container motion controller to the source container motion daemon, the target container motion daemon and the host container motion daemon, and copying content of a source memory of the source container to a target memory via the source container motion daemon and the host container motion daemon under control of the container motion controller.

Abstract: Methods, computer program products, and systems are presented. The methods include customer specific information exchange and an adjustment of the privacy level of this information. For this purpose an abstraction layer and an obfuscation module are introduced. Using a “fraud vector” a risk assessment is performed on the obfuscated transaction data.

Abstract: Methods, computer program products, and systems are presented. The methods include customer specific information exchange and an adjustment of the privacy level of this information. For this purpose an abstraction layer and an obfuscation module are introduced. Using a “fraud vector” a risk assessment is performed on the obfuscated transaction data.

Abstract: Automated approval of a non-compliance of a modified configuration of a computer system includes performing a compliance check by a compliance management system. The modified configuration results from deploying a pre-approved modification pattern by a package management system modifying an initial configuration of the computer system. The modification pattern is provided by a software package that specifies at least one modification to be applied to the initial configuration and at least one compliance exception pre-approval specifying pre-approved non-compliances of modifications with compliance rules. Responsive to detecting a non-compliance, the non-compliance is compared with the pre-approved non-compliances. In response to determining that the detected non-compliances are not matching any pre-approved non-compliances, a compliance exception approval is requested. The detected non-compliance is approved in response to receiving the compliance exception approval for the detected non-compliances.

Abstract: A method and associated computing system. A first computing environment receives data that includes first sensitive data. The first computing environment includes a hypervisor, a virtual machine running on the hypervisor, and a compliance gateway coupled to the virtual machine and the hypervisor. The compliance gateway intercepts the request. The compliance gateway inspects the intercepted request, does not find sensitive data in the request from inspecting the intercepted request, and forwards the request directly to the virtual machine in response to not finding sensitive data in the request. The virtual machine receives the request from the compliance gateway and in response. The virtual machine initiates performance of an operation indicated in the request. The hypervisor determines that the performance of the request requires the first sensitive data that is sensitive, and in response the hypervisor prevents the virtual machine from completing performance of the operation, by intercepting the operation.

Abstract: Automated approval of a non-compliance of a modified configuration of a computer system includes performing a compliance check by a compliance management system. The modified configuration results from deploying a pre-approved modification pattern by a package management system modifying an initial configuration of the computer system. The modification pattern is provided by a software package that specifies at least one modification to be applied to the initial configuration and at least one compliance exception pre-approval specifying pre-approved non-compliances of modifications with compliance rules. Responsive to detecting a non-compliance, the non-compliance is compared with the pre-approved non-compliances. In response to determining that the detected non-compliances are not matching any pre-approved non-compliances, a compliance exception approval is requested. The detected non-compliance is approved in response to receiving the compliance exception approval for the detected non-compliances.

Abstract: The invention relates to a computer-implemented method for automated approval of a non-compliance of a modified configuration of a computer system with one or more compliance rules, the method comprising: receiving by a package management system a pre-approved modification pattern in form of a software package, deploying a modification pattern of the software package and providing compliance exception pre-approvals of the software package to a compliance management system, performing a compliance check of the resulting modified configuration of the computer system, in response to detecting a non-compliance with a compliance rule, comparing the detected non-compliance with the one or more pre-approved non-compliances, in response to a matching of the detected non-compliance with one or more of the respective pre-approved non-compliances, automatically approving the detected non-compliance by the compliance management system.

Abstract: The invention relates to a computer-implemented method for automated approval of a non-compliance of a modified configuration of a computer system with one or more compliance rules, the method comprising: receiving by a package management system a pre-approved modification pattern in form of a software package, deploying a modification pattern of the software package and providing compliance exception pre-approvals of the software package to a compliance management system, performing a compliance check of the resulting modified configuration of the computer system, in response to detecting a non-compliance with a compliance rule, comparing the detected non-compliance with the one or more pre-approved non-compliances, in response to a matching of the detected non-compliance with one or more of the respective pre-approved non-compliances, automatically approving the detected non-compliance by the compliance management system.

Abstract: A method and associated computing system. A first computing environment receives data that includes first sensitive data. The first computing environment includes a hypervisor, a virtual machine running on the hypervisor, and a compliance gateway coupled to the virtual machine and the hypervisor. The compliance gateway intercepts the request. The compliance gateway inspects the intercepted request, does not find sensitive data in the request from inspecting the intercepted request, and forwards the request directly to the virtual machine in response to not finding sensitive data in the request. The virtual machine receives the request from the compliance gateway and in response. The virtual machine initiates performance of an operation indicated in the request. The hypervisor determines that the performance of the request requires the first sensitive data that is sensitive, and in response the hypervisor prevents the virtual machine from completing performance of the operation, by intercepting the operation.

Abstract: A method and associated computing system. Data received by a computing environment includes a mixture of non-sensitive data and sensitive data along with related metadata indicative of a sensitivity of the sensitive data. The computing system includes the computing environment. An operation is performed on the sensitive data in the computing environment by: (a) determining that the data used for the operation are sensitive data, (b) intercepting the operation on the sensitive data, and (c) registering newly created sensitive data, as a result of the operation, with metadata indicating one or more addresses of the sensitive data. An external access to the sensitive data in the computing environment is intercepted. A compliance firewall rule is applied to the sensitive data intended to leave the computing environment. The compliance firewall rule defines an action to be applied to the sensitive data such that the sensitive data are protected against unauthorized access.

Abstract: The present invention describes a method and system for governing a physical device or application service in a real world through a virtual device in a virtual world. The physical device or application service registers at least one virtual adaptor of the physical device or application service to a virtual device broker. A user creates or composes the virtual device with the at least one virtual adaptor in the virtual device broker. The user commands to the virtual device through a user interface of the virtual device. The at least one virtual adaptor in the virtual device translates the command to a controlling signal to the physical device or application service. The controlling signal operates the physical device or application service according to the command to the virtual device.

Abstract: A system and method for using an encoding module in a virtual world server for: receiving scene data including a description of at least one virtual object and underlying terrain associated with the scene; organizing the description of the at least one virtual object into a first track segmented by virtual object time slots, organizing the description of the underlying terrain into a second track segmented by terrain time slots; and storing the descriptions in persistent storage as separate files where users can retrieve and render the separate files.

Abstract: A system and method enabling the search for a three-dimensional virtual world object across the universe of virtual worlds by utilizing a two-step search process to first identify the object and second, to actively locate and generate a URI to all presently manifest instances of that object.

Abstract: Computer method and apparatus render views of a computer generated virtual world to a remote viewer. The invention method and apparatus establish an avatar of a resident user as a proxy on behalf of the remote viewer. The computer node of the resident user exports proxy avatar views of the virtual world to the remote viewer. The remote viewer computer renders the exported virtual world views without executing virtual world application programs.

Abstract: Embodiments of the present invention provide a method, system and computer program product for composing and managing a presentation in a virtual world. In an embodiment of the invention, a method for composing and managing a presentation in a virtual world can include arranging a set of slides in a presentation, selecting a location in a portion of a virtual world for displaying the slides and also for attendee avatars viewing the slides, composing movements and gestures of a presenter avatar in coordination with a display of slide content of the slides, and presenting the presentation in the location of the virtual world at the location selected for displaying the slides for the attendee avatars placed the selected location for the attendee avatars while applying the composed movements and gestures of the presenter avatar coordinated with a display of slide content of the slides.

Abstract: A system for managing topologies includes a topology data datastore that stores topology information. A topology computer element interfaces with the topology data datastore to create and update a topology of resources. A subscription computer element generates notifications to a user based on at least one of the creating and the updating of the topology of resources and further based on subscription data.

Abstract: A mechanism is provided for providing compartmentalized security in product reviews. A central authoritative state module within a compartmentalized security mechanism identifies a clearance level associated with a user that has been authenticated. Responsive to the clearance level of the user being sufficient to access the information, the central authoritative state module determines whether the information requires a simulation to be executed. Responsive to the information failing to require execution of a simulation, a coordination module in the compartmentalized security mechanism retrieves the information. A display and input interaction module on a client system then displays the information in accordance with the clearance level of the user thereby forming displayed information. Displaying the information in accordance with the clearance level of the user comprises displaying in detail only portions of the information of the product that the user has access to.

Abstract: A system for centrally managing credential information of a user and a virtual object of a user across a plurality of virtual world (or corresponding virtual world servers) is disclosed. The system includes an identity service module for managing an authentication request (e.g., verifying credential information of a user) from a user and an inventory service module for managing virtual properties of a user. Furthermore, a method for logging in a virtual world by using the system is disclosed. A method for teleporting a virtual property from a virtual world to another virtual world by using the system is disclosed. A method for logging out from a virtual world by using the system is also disclosed.

Abstract: A virtual business transaction is implemented between a first virtual world and a second virtual world by providing a searchable catalog that includes one or more items each comprising a virtual good, a virtual service, a real good, or a real service. An object representation is stored for each of the items. Each of the stored object representations is associated with metadata comprising any of digital rights metadata, ownership metadata, identity metadata, payment method metadata, or currency detail metadata. A set of transformation algorithms are established that are customized through a rule set. A request is received specifying a copying, modifying, or reselling of an item selected from the items in the searchable catalog. The copying, modifying, or reselling of the item from a first virtual world to a second virtual world is implemented using the set of transformation algorithms.