Abstract: Systems and methods for Quality of Service (QoS) enforcement and data security for containers accessing storage. An example method may comprise: receiving an input/output (I/O) call initiated by a container running on a host computer system to request data from a storage device; translating the I/O call into a device emulator call to a device emulator emulating a storage device; sending the device emulator call to the device emulator; and receiving, from the device emulator, a response comprising the data retrieved from the storage device.

Abstract: Containerized high-performance network storage is disclosed. For example, first and second memories are associated with first and second hosts and separated by a network. A storage controller and a container scheduler execute on processors. The container scheduler instantiates first and second storage containers on the respective first and second hosts. The storage controller configures the first and second storage containers as first and second storage nodes of a distributed file system. The container scheduler instantiates a service container on the first host. The storage controller receives a persistent volume claim associated with the service container and then creates a persistent storage volume in the first storage node based on the persistent volume claim. The persistent storage volume is mapped to the service container, where a content of the persistent storage volume is replicated to the second storage node.

Abstract: Containerized high-performance network storage is disclosed. For example, first and second memories are associated with first and second hosts and separated by a network. A storage controller and a container scheduler execute on processors. The container scheduler instantiates first and second storage containers on the respective first and second hosts. The storage controller configures the first and second storage containers as first and second storage nodes of a distributed file system. The container scheduler instantiates a service container on the first host. The storage controller receives a persistent volume claim associated with the service container and then creates a persistent storage volume in the first storage node based on the persistent volume claim. The persistent storage volume is mapped to the service container, where a content of the persistent storage volume is replicated to the second storage node.

Abstract: Systems and methods for Quality of Service (QoS) enforcement and data security for containers accessing storage. An example method may comprise: receiving an input/output (I/O) call initiated by a container running on a host computer system to request data from a storage device; translating the I/O call into a device emulator call to a device emulator emulating a storage device; sending the device emulator call to the device emulator; and receiving, from the device emulator, a response comprising the data retrieved from the storage device.

Abstract: A processing device is to receive a block input/output (I/O) call in a first format from a container hosted on a host machine to request data on a storage device and translate the block I/O call from the first format into a device emulator call in a second format. The second format is compatible with a device emulator on the host machine. The device emulator emulates a block storage device for the container. The processing device is to send the device emulator call in the second format to the device emulator, and receive, from the device emulator, a response that include the data on the storage device for the container.

Abstract: An auditing system is disclosed comprising a Policy Validation Mechanism Program (PVMP) that operates in conjunction with a Workflow Engine (WE), and a Policy Validation Server Program (PVSP) that operates on a Policy Validation Server (PVS) connected to the WE by a secure communication link. The PVMP converts a workflow to a workflow representation (WR) and sends the WR to the PVS. The PVSP compares the steps in the WR to a security policy identified for that WR and determines whether the WR is in compliance. In addition, the PVSP validates a checksum for the WR and logs the checksum for subsequent comparisons. The PVSP uses the checksum to determine whether a policy has changed during execution of the workflow.

Abstract: An auditing system is disclosed comprising a Policy Validation Mechanism Program (PVMP) that operates in conjunction with a Workflow Engine (WE), and a Policy Validation Server Program (PVSP) that operates on a Policy Validation Server (PVS) connected to the WE by a secure communication link. The PVMP converts a workflow to a workflow representation (WR) and sends the WR to the PVS. The PVSP compares the steps in the WR to a security policy identified for that WR and determines whether the WR is in compliance. In addition, the PVSP validates a checksum for the WR and logs the checksum for subsequent comparisons. The PVSP uses the checksum to determine whether a policy has changed during execution of the workflow.

Abstract: An auditing system is disclosed comprising a Policy Validation Mechanism Program (PVMP) that operates in conjunction with a Workflow Engine (WE), and a Policy Validation Server Program (PVSP) that operates on a Policy Validation Server (PVS) connected to the WE by a secure communication link. The PVMP converts a workflow to a workflow representation (WR) and sends the WR to the PVS. The PVSP compares the steps in the WR to a security policy identified for that WR and determines whether the WR is in compliance. In addition, the PVSP validates a checksum for the WR and logs the checksum for subsequent comparisons. The PVSP uses the checksum to determine whether a policy has changed during execution of the workflow. If the WR is not in compliance, if the checksum cannot be validated, or if a policy has changed, then a failure notification is sent to the WE. Otherwise, a success notification is sent to the WR.

Abstract: A method and computer usable program product for generating meal plans based on a set of nutritional policies. The process determines nutritional requirements specified by a set of nutritional policies in response to receiving a request for a set of meal plans for a set of users. The set of nutritional policies correspond to the set of users. The process identifies a set of potential meal plans in response to determining the nutritional requirements specified by the set of nutritional policies. Each potential meal plan in the set of potential meal plans satisfies all nutritional requirements for the set of nutritional policies. The process generates a listing of ingredients required by the selected meal plan that is unavailable in a current inventory in an amount required by the selected meal plan, in response to receiving a selection of a potential meal plan to form a selected meal plan.

Abstract: A method, computer program product, and system are disclosed for installing a patch on at least some of the servers of a network having multiple servers. A plurality of servers of the network are identified that requires installation of the patch. Two or more priority values are assigned to each of the identified servers. The priority values for a given identified server are each associated with a different criterion in a set of criteria. The assigned priority values are selectively processed for respective identified servers, in order to determine an initial priority, comprising a first sort order, for installing the patch on each identified server. The first sort order is revised in accordance with information pertaining to prior use of respective identified servers, to provide a second sort order. The patch is installed on each of the identified servers, in an order determined by the second sort order.

Abstract: A method, apparatus, and computer usable program product for mapping a content description to a container. The process identifies a container placed in a storage unit to form an identified container. The identified container includes an unidentified content. The process displays a set of predictive content descriptions for the unidentified content. In response to receiving a selection of a content description from the set of predictive content descriptions, the process maps the selected content description to the unidentified container.

Abstract: Embodiments of the present invention provide a computer implemented method, apparatus, and computer program product for estimating, refining, and using the tare mass for an item to determine and monitor item depletion. In response to detecting an initial presence of an item in the storage unit, a controller collects data about the item. The controller then searches a database for a recorded item containing the same item identification. The tare mass of the item is set equal to the refined tare mass of the recorded item retrieved from the database. The tare mass is then used to calculate a depletion threshold for the item.

Abstract: A computer implemented method, apparatus, and computer program product for communicating the shelf position of an item within a storage unit. An item to be located in the storage unit is identified. The storage unit system determines the shelf position of the identified item. The system then communicates the shelf position of the identified item to the user. If the user requests multiple items, the optimal sequence of retrieval for the items is determined based on a user configurable algorithm.

Abstract: Embodiments of the present invention provide a computer implemented method, apparatus, and computer program product for estimating, refining, and using the tare mass for an item to determine and monitor item depletion. In response to detecting an initial presence of an item in the storage unit, a controller collects data about the item. The controller then searches a database for a recorded item containing the same item identification. The tare mass of the item is set equal to the refined tare mass of the recorded item retrieved from the database. The tare mass is then used to calculate a depletion threshold for the item.

Abstract: An integration server architecture (ISA) that facilitates communication between processes that do not share a common message format or use a common communication protocol. The ISA comprises a combination of adapters and a Queuing and Translation Engine (QTE). Every process that uses the ISA must have an adapter designed to understand that process's native message format. The adapter forwards the message to the QTE. The QTE places the forwarded message in an incoming message queue (IMQ). The QTE then retrieves messages from the IMQ in the order they arrive, identifies the sender, and locates an entry for the sender in a Configuration Database (CDB). The CDB entry designates a translation map that enables the QTE to properly translate messages into the receiving process's native format. The QTE uses the map to translate the messages into the receiving process's native format, and then forwards the translated message to the appropriate adapter.

Abstract: System, method and program for managing a production server. An authentication server sends to the production server via a network a group password for a GroupID to access a file in the production server. A user at a workstation sends via a network to the authentication server an individual UserID and corresponding individual password for the user and a request for the group password for the GroupID to access a file in the production server protected by the group password. In response, the authentication server authenticates the individual UserID with the corresponding individual password and returns to the workstation the group password for the GroupID. After receiving the group password from the authentication server, the user at the workstation sends via a network to the production server the group password and GroupID and a request to access the file in the production server protected by the group password.

Abstract: Container manifests are tracked using a radio frequency identification (RFID) contents reader affixed to a container in which a plurality of RFID-tagged items are disposed, the contents reader being configured to collect and store identification information from all of the tagged items; and using an active RFID tag emulator affixed to the container which responds to an external reader activation code by receiving the collected information from the affixed RFID contents reader, and by transmitting the identification information to the external reader.

Abstract: A computer implemented method, apparatus, system, and computer usable program code for monitoring a real-time depletion of an item in a storage unit. A controller identifies an item placed in the storage unit to form an identified item. The controller detects a change in mass sensor data from a mass sensor shelf in a set of mass sensor shelves associated with the storage unit. The controller associates the change in mass sensor data with the identified item to form a current mass for the identified item. The controller determines a depletion of the identified item based a difference between the current mass and a previous mass for the identified item.

Abstract: An auditing system is disclosed comprising a Policy Validation Mechanism Program (PVMP) that operates in conjunction with a Workflow Engine (WE), and a Policy Validation Server Program (PVSP) that operates on a Policy Validation Server (PVS) connected to the WE by a secure communication link. The PVMP converts a workflow to a workflow representation (WR) and sends the WR to the PVS. The PVSP compares the steps in the WR to a security policy identified for that WR and determines whether the WR is in compliance. In addition, the PVSP validates a checksum for the WR and logs the checksum for subsequent comparisons. The PVSP uses the checksum to determine whether a policy has changed during execution of the workflow. If the WR is not in compliance, if the checksum cannot be validated, or if a policy has changed, then a failure notification is sent to the WE. Otherwise, a success notification is sent to the WR.

Abstract: A means for a person in distress to use a mobile device to communicate covertly with an Emergency Response Center is provided. The means contains a response designed not to alert an abductor of the communication as well as to indicate whether the person is indeed in distress. The means also allows the Emergency Response Center to locate both the distressed person and a mobile device using GPS or triangulation. The device may be in regular operation mode or in distress mode. When the device is in the distress mode, it will appear to be in normal operating mode if in operation or it will appear to be off if off. In addition, the device may be used for forensic purposes since it may provide voice and video data of the situation at an emergency location to the Emergency Response Center.