Abstract: A computer-implemented method for securely transferring a secret from a source computing component to a target computing component, wherein the source computing component and the target computing component are part of a secure computing environment is disclosed. The method comprises upon the source computing component receiving from the target computing component a signed attestation document, verifying, by the source computing component, an authenticity and content of the attestation document, and upon a successful verification of the authenticity and the content, transferring, by the source computing component the secret to the target computing system. Thereby, the attestation document is attesting that the target computing component is compliant to an update governance rule.

Abstract: In an approach to improve service routing, embodiments route a service request to an execution environment. Embodiments provide a plurality of execution environments, wherein in each execution environment executable services are deployable, provide a service registry maintaining a plurality of execution environments, and receive, by the service registry, a service routing request. Further, embodiments determine a required trust level for a service relating to the service routing request by using a trained machine-learning system for outputting a trust level class when receiving service context data of the service relating to the service routing request as input, determine, using the service registry, a set of execution environments matching the output trust level class, and select, by the service registry, one execution environment of the determined set of execution environments.

Abstract: A computer-implemented method for building trusted executable software using trusted building units, wherein a path between the building units is untrusted, is disclosed. The method comprises generating, by each of the trusted building units, an identifier for identifying an output of the respective trusted building unit, wherein the respective trusted building unit also generates a signed confirmative certificate comprising the identifier. The method comprise as well utilizing, by each of the distributed trusted building units, output results of at least one of a predecessor build unit of the trusted building unit as input, validating that each of the signed confirmative certificates conforms to a predefined set of policy rules, and upon a failed validating of the signed confirmative certificate of one of the trusted building units, terminating the building of the trusted executable software.

Abstract: A computer-implemented method for monitoring and auditing secure software builds is disclosed. The computer-implemented includes receiving a build file containing a sequence of build instructions. The computer-implemented method further includes, for each build instruction being executed: determining an indicator value corresponding to a monitoring level associated with a build instruction; and modifying logging of trace information associated with a computing system executing the build instruction based, at least in part, on the indicator value corresponding to the monitoring level.

Abstract: A computer-implemented method for execution of a service in a distributed environment, the method comprising performing a speculative execution of a service and storing a related result, wherein a decision whether the speculative execution of the service is performed is dependent on a dynamically changing score value and receiving a request for an execution of the service at a request proxy. Additionally, the method comprises upon determining that a valid result of the execution of the service is available from an earlier speculative execution of a comparable service, returning the valid result by the request proxy, and upon determining that a valid result of the execution of the service is not available from an earlier speculative execution of a comparable service, executing the service in a non-speculative manner, and returning a received non-speculative result by the request proxy.

Abstract: Building and using a smart contract in order to resolve the isolation between database users and service operators for hyper-protect database as a service (DBaaS). The use of the smart contract in the hyper-protect DBaaS environment allows the service operator to perform operations on sensitive and secure data in the database owned by a user without necessarily revealing the content of the sensitive and secure data.

Abstract: The present invention provides a method and system for storing and retrieving tags. Each tag is associated with a resource, upon a user's request. A tagging GUI is displayed which presents the available tags for one particular resource and/or a tag cloud GUI is displayed which presents tags for more than one resource. The tagging GUI allows to assign new tags to single resources. The tag cloud GUI enables users to search for resources which have been assigned certain tags. In the tag cloud GUI the relevancy of each single tag is visually reflected by its weighting factor which is determined by the frequency of occurrence.

Abstract: A server system and methodology include the following operations. A request for tags associated with a resource is received from a tag widget associated with the resource. Responsive to the request, a tag weighting engine is executed that identifies the tags and determines, respectively, individual overall weighting factors for each of the tags. The tags and associated overall weighting factors are forwarded to the tag widget within the client. The individual overall weighting factors for a particular tag is based upon a combination of weighting factors including a context weight factor for the particular tag. The context weighting factor for the particular tag is based upon a past context for the particular tag specified by a past user and an active context in which a user of the tag widget is operating.

Abstract: The present disclosure relates to a method comprising receiving an electronic message. Message intents of the received electronic message and one or more related intents may be determined. An electronic message may be generated according to a selected subset of the message intents or according to the related intents. The generated electronic message may be provided.

Abstract: A computer-implemented method for detecting reference data standardization gaps in data sets is disclosed. The method comprises identifying at least one reference data candidate in a data set, using an index for values of the identified at least one reference data candidate, and determining a difference between an earlier version of a reference data set relating to the reference data candidate and a current version of the reference data set. Furthermore, the method comprises comparing the determined difference with values of the index, and identifying entries in the at least one reference data candidate having a value identical to a value of the difference as reference data standardization gap.

Abstract: A computer-implemented method for optimizing a search index of a search service may be provided. The method may comprise storing continuously search queries of the search service, receiving a content item to be indexed, adding the content item temporarily to the a main index of the search service, determining a set of document relevancy factor (DRF) values for the content item for a selected set of stored search queries, determining a combined document relevancy factor value out of the determined set of document relevancy factor values for the content item, comparing the combined document relevancy factor value for the content item to a document relevancy factor threshold value, and adding, in response to the comparing, the content item permanently to an index based on the results of the comparing.

Abstract: Provided are techniques for mode-specific search query processing. A current search query is received from a user, wherein the user has a user profile. In response to determining that a query mode for the current search query is a guided mode, a query context of the current search query is determined. A classification for the current search query is determined. One or more search influencers are identified using the classification, where each of the one or more search influencers has a corresponding user profile. The current search query is rewritten based on the query context, a private portion of the user profile of the user, and a public portion of each corresponding user profile of each of the one or more search influencers. The rewritten search query is executed to generate search results, and the search results are returned.

Abstract: Request flow log retrieval can include extracting one or more keywords from a natural language description of an action, the action being a system response to a user request submitted to a resource-provisioning system during a user session. Request flow log retrieval can also include determining a classification of the action based on a correlation value generated by a classifier model trained using machine learning to classify actions performed by the resource-provisioning system, the classification based on the one or more keywords. Additionally, request flow log retrieval can include automatically identifying a request flow associated with the action based on the classification of the action and returning at least one system log entry corresponding to the request flow.

Abstract: A computer-implemented method for securely transferring a secret from a source computing component to a target computing component, wherein the source computing component and the target computing component are part of a secure computing environment is disclosed. The method comprises upon the source computing component receiving from the target computing component a signed attestation document, verifying, by the source computing component, an authenticity and content of the attestation document, and upon a successful verification of the authenticity and the content, transferring, by the source computing component the secret to the target computing system. Thereby, the attestation document is attesting that the target computing component is compliant to an update governance rule.

Abstract: A computer-implemented method for building trusted executable software using trusted building units, wherein a path between the building units is untrusted, is disclosed. The method comprises generating, by each of the trusted building units, an identifier for identifying an output of the respective trusted building unit, wherein the respective trusted building unit also generates a signed confirmative certificate comprising the identifier. The method comprise as well utilizing, by each of the distributed trusted building units, output results of at least one of a predecessor build unit of the trusted building unit as input, validating that each of the signed confirmative certificates conforms to a predefined set of policy rules, and upon a failed validating of the signed confirmative certificate of one of the trusted building units, terminating the building of the trusted executable software.

Abstract: Provided are techniques for mode-specific search query processing. A current search query is received from a user, wherein the user has a user profile. In response to determining that a query mode for the current search query is a guided mode, a query context of the current search query is determined. A classification for the current search query is determined. One or more search influencers are identified using the classification, where each of the one or more search influencers has a corresponding user profile. The current search query is rewritten based on the query context, a private portion of the user profile of the user, and a public portion of each corresponding user profile of each of the one or more search influencers. The rewritten search query is executed to generate search results, and the search results are returned.

Abstract: An application (App)-BOT, scans a context of a user of an application and obtains current scanned user data. The App BOT determines a set of user information entities from the scanned user data containing current information about the user. In a negotiation phase, the App BOT a data access request offer from a mixed reality data (MRD)-BOT. A privacy leak score is estimated that represents a user value attributed to the permission to access the labelled user information entity based on the data access request offer. Responsive to determining that the privacy leak score exceeds a privacy leak score threshold, an acceptance of the data access request offer is sent to the MRD BOT and providing access requested by the data access request. Otherwise, a counteroffer is sent to the offer to the MRD BOT.

Abstract: The present disclosure relates to a method comprising receiving an electronic message of an electronic communication system. An image based noisy content may be generated. The image based noisy content is different from a content of the received electronic message and relates to the message intents of the received message. The electronic communication system may be configured to provide the image based noisy to the recipient instead of the received electronic message or provide the received electronic message to the recipient in addition to the image based noisy.

Abstract: The invention relates to a method for personalizing a search of a search service. The search service comprises a search index with content items of a search type being used as first search results for first search queries issued by the client application and providing second search queries to be executed for retrieving second search results to be returned in reply to the first search queries. The method comprises using social media content items retrieved from social media services for extracting a set of keywords comprised by the social media content items. A second search query modified, wherein the modifying comprises adding keywords of the set keywords as additional search parameters of the determined second search query.

Abstract: Onboard vehicle software that performs the following operations: (i) receiving, by a control device installed with a vehicle, situation assessment information pertaining to vehicle traffic; (ii) determining, by the control device, whether the situation assessment information is indicative of an event likely to impact vehicle traffic; and (iii) in response to determining that the situation assessment information is indicative of the event likely to impact vehicle traffic, sending, by the control device, a print command to a printer communicatively coupled to the control device, the printer adapted to print a patterned layer of a coloring substance to a surface supporting the vehicle, and the print command instructing the printer to print the coloring substance to the surface in a pattern encoding a notification.