Abstract: Embodiments are directed to deploying a workload on the best/highest performance node. Nodes configured to accommodate a request for a workload are selected. Information is collected on each of the selected nodes and the workload. Predicted response times expected for the workload running on each of the selected nodes are determined. The workload is deployed on a node of the selected nodes, the node having a corresponding predicted response time for the workload, the workload being deployed on the node based at least in part on the corresponding predicted response time.

Abstract: User data security is provided. Encrypted user data are identified in a virtual machine. A private key of a public/private cryptographic key pair corresponding to a user is retrieved. The encrypted user data is decrypted within the virtual machine utilizing the private key corresponding to the user to form decrypted user data. The encrypted user data are replaced in the virtual machine with the decrypted user data. The decrypted user data is processed in the virtual machine to perform a service in a cloud environment.

Abstract: A computer-implemented method to limit access to sensitive information by filtering log files. The method includes deploying a first pod on a node of a cloud computing system, where the first pod includes a first container configured to run an application. The method also includes generating a first log file for the first container, where the first log file includes a set of actions performed by the application for a period of time. The method further includes filtering, by a filter, the first log file wherein the filter is configured to remove a type of sensitive data from the first log file. The method includes exporting, in response to the filtering, the first log file to the node. Advantageously, this can prevent various parties from accessing sensitive data that is contained in log files.

Abstract: A system may include a memory and a processor in communication with the memory. The processor may be configured to perform operations that include generating a key pair and encrypting a data credential with a public key to make a data credential secret. The operations may further include storing the data credential secret in a cluster on a host and deploying a workload on the cluster. The operations may also include establishing an empty bundle in the host and generating a pod trusted execution environment.

Abstract: Embodiments are directed to using remote pods. An intermediary software is instantiated in a worker node virtual machine and is used to cause a pod virtual machine to be created, the pod virtual machine being remote from the worker node virtual machine. An overlay network is established between the intermediary software in the worker node virtual machine and a pod space in the pod virtual machine. The overlay network is used to cause containers to be created in the pod virtual machine, where the worker node virtual machine is configured to use the overlay network to manage communications with the pod virtual machine.

Abstract: Embodiments are directed to a container storage system in remote pods. A worker node virtual machine determines that a volume is available for attachment to the worker node virtual machine. An intermediary software of the worker node virtual machine causes a pod container storage interface to attach the volume to a pod virtual machine. In response to attaching the volume to the pod virtual machine, the intermediary software of the worker node virtual machine causes the pod container storage interface to mount the volume to the pod virtual machine such that the volume is available for use by the pod virtual machine.

Abstract: In a method for encryption of sensitive data, an encrypted user private key is received in a Trusted Execution Environment (TEE) in a worker node in a container management system, the encrypted user private key being an encrypted version of a user private key for decrypting a message from a user in the container management system. The user private key is obtained in the TEE, and the encrypted user private key being decrypted into the user private key with a provider private key that is received from an encryption manager for managing the container management system. With these embodiments, the user private key may be transmitted to the worker node safely, such that the worker node may use the user private key to decrypt messages from the user. Therefore, the security level of the container management system may be increased.

Abstract: Embodiments are directed to deploying a workload on the best/highest performance node. Nodes configured to accommodate a request for a workload are selected. Information is collected on each of the selected nodes and the workload. Predicted response times expected for the workload running on each of the selected nodes are determined. The workload is deployed on a node of the selected nodes, the node having a corresponding predicted response time for the workload, the workload being deployed on the node based at least in part on the corresponding predicted response time.

Abstract: A process deployment controller creates an updated image for an intermediary engine in order to execute one or more applications on a host infrastructure. The process deployment controller generates a partial image by executing source code from a template repository. The partial image provides a structure used to create an intermediary engine used with a container, which includes an application, as well as binaries and libraries required to execute the application in an infrastructure via the intermediary engine. The process deployment controller transmits an identifier of the infrastructure to a component registry; receives a component description of the infrastructure from the component registry; and uses the component description to create an updated image of the partial image. The process deployment controller, upon receiving a request for the application to run on the infrastructure, utilizes the updated image and intermediary engine to execute the application on the infrastructure.

Abstract: A method includes predicting, using a machine learning model and based on a received set of user interactions on keywords appearing in a presentation, a knowledge background of the user indicating the user's degree of understanding of the presentation. The method also includes generating, based on the predicted knowledge background, a message comprising a description of a keyword in the presentation and coordinates where the description is to be positioned in the presentation and communicating the message to a device of the user.

Abstract: Aspects of the invention include receiving an original work written in a first style to be transformed into a derivate work written in a second style. The transforming includes accessing a similarity data structure organized to include a phrase-similarity vector space of phrase vectors representing degrees of similarity between phrases in a corpus of works written in the second style. An original sentence of the original work that includes one or more original phrases is obtained. The original phrases are located in the phrase-similarity vector space. For each of the original phrases, a similar phrase from the phrase-similarity vector space is selected based on the selected similar phrase having a phrase-similarity index corresponding to the original phrase that is greater than a predetermined phrase-similarity index threshold. The derivative work is created by replacing the original phrases in the original work with the selected similar phrases. The derivative work is output.

Abstract: Disclosed embodiments provide techniques for intelligent media sharing with visualized positioning layout in real time. A floor plan is retrieved corresponding to the physical location of a sender electronic device. A zone boundary corresponding to the physical location of the sender electronic device is determined. A list of potential recipient electronic devices within the zone boundary is generated. A floor plan view is rendered on the sender electronic device. A graphical representation of the potential recipient electronic devices on the floor plan view is rendered, overlaid in a semi-transparent manner with a media selection interface on the sender electronic device. A selection is received for one or more media items using the media selection interface. A send request is received for one or more potential recipients, resulting in sending the one or more media items to at least one potential recipient in response to receiving a user interface request action.

Abstract: A process deployment controller creates an updated image for an intermediary engine in order to execute one or more applications on a host infrastructure. The process deployment controller generates a partial image by executing source code from a template repository. The partial image provides a structure used to create an intermediary engine used with a container, which includes an application, as well as binaries and libraries required to execute the application in an infrastructure via the intermediary engine. The process deployment controller transmits an identifier of the infrastructure to a component registry; receives a component description of the infrastructure from the component registry; and uses the component description to create an updated image of the partial image. The process deployment controller, upon receiving a request for the application to run on the infrastructure, utilizes the updated image and intermediary engine to execute the application on the infrastructure.

Abstract: Aspects of the invention include receiving an original work written in a first style to be transformed into a derivate work written in a second style. The transforming includes accessing a similarity data structure organized to include a phrase-similarity vector space of phrase vectors representing degrees of similarity between phrases in a corpus of works written in the second style. An original sentence of the original work that includes one or more original phrases is obtained. The original phrases are located in the phrase-similarity vector space. For each of the original phrases, a similar phrase from the phrase-similarity vector space is selected based on the selected similar phrase having a phrase-similarity index corresponding to the original phrase that is greater than a predetermined phrase-similarity index threshold. The derivative work is created by replacing the original phrases in the original work with the selected similar phrases. The derivative work is output.

Abstract: Disclosed embodiments provide techniques for intelligent media sharing with visualized positioning layout in real time. A floor plan is retrieved corresponding to the physical location of a sender electronic device. A zone boundary corresponding to the physical location of the sender electronic device is determined. A list of potential recipient electronic devices within the zone boundary is generated. A floor plan view is rendered on the sender electronic device. A graphical representation of the potential recipient electronic devices on the floor plan view is rendered, overlaid in a semi-transparent manner with a media selection interface on the sender electronic device. A selection is received for one or more media items using the media selection interface. A send request is received for one or more potential recipients, resulting in sending the one or more media items to at least one potential recipient in response to receiving a user interface request action.

Abstract: Disclosed embodiments provide techniques for intelligent media sharing with visualized positioning layout in real time. A floor plan is retrieved corresponding to the physical location of a sender electronic device. A zone boundary corresponding to the physical location of the sender electronic device is determined. A list of potential recipient electronic devices within the zone boundary is generated. A floor plan view is rendered on the sender electronic device. A graphical representation of the potential recipient electronic devices on the floor plan view is rendered, overlaid in a semi-transparent manner with a media selection interface on the sender electronic device. A selection is received for one or more media items using the media selection interface. A send request is received for one or more potential recipients, resulting in sending the one or more media items to at least one potential recipient in response to receiving a user interface request action.

Abstract: Disclosed embodiments provide techniques for intelligent media sharing with visualized positioning layout in real time. A floor plan is retrieved corresponding to the physical location of a sender electronic device. A zone boundary corresponding to the physical location of the sender electronic device is determined. A list of potential recipient electronic devices within the zone boundary is generated. A floor plan view is rendered on the sender electronic device. A graphical representation of the potential recipient electronic devices on the floor plan view is rendered, overlaid in a semi-transparent manner with a media selection interface on the sender electronic device. A selection is received for one or more media items using the media selection interface. A send request is received for one or more potential recipients, resulting in sending the one or more media items to at least one potential recipient in response to receiving a user interface request action.

Abstract: The present invention provides methods of modulating an immune response in an organism by administering medicinally active extracts and fractions, and a method for preparing the same by extracting and fractioning constituents from the tissue of components of Ganoderma lucidum.

Abstract: The present invention provides methods of modulating an immune response in an organism by administering medicinally active extracts and fractions, and a method for preparing the same by extracting and fractioning constituents from the tissue of components of Ganoderma lucidum.

Abstract: The present invention provides medicinally active extracts and fractions, and a method for preparing the same by extracting and fractioning constituents from the tissue of components of Ganoderma lucidum. These active extracts and fractions are useful for inhibiting tumor growth, modulating immune response, and increasing hematopoietic activity.