David M Merrill

US Patent:

20110219434, Sep 8, 2011

Filed:

Mar 4, 2010

Appl. No.:

12/717202

Inventors:

Linda N. Betz - Poughkeepsie NY, US
Wesley J. Ho - San Francisco CA, US
Charles S. Lingafelt - Durham NC, US
David P. Merrill - New Paltz NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 9/32
G06F 21/00

US Classification:

726 5, 726 3

Abstract:

Embodiments of the present invention allow for the provisioning of security services within a Cloud computing environment by third parties. Specifically, under the present invention, a Cloud provider will publish a set of potential security attributes (e.g., a list), which can be monitored, to the Cloud customer. The Cloud customer will designate/select one or more of those attributes that the Cloud customer wishes to have monitored for one or more Cloud resources that it is using. The Cloud provider will then provide to the Cloud customer a set of third party security service providers capable of monitoring the attributes the Cloud customer designated. The Cloud customer will then select one or more third party providers from the provided set, and the Cloud provider will associate the given Cloud resources with the respective third party providers. Once third party providers have been associated with Cloud resources, a secure relationship between the third party provider(s) and the Cloud providers will be established.

US Patent:

20110264907, Oct 27, 2011

Filed:

Apr 27, 2010

Appl. No.:

12/768106

Inventors:

Linda N. Betz - Poughkeepsie NY, US
Wesley J. Ho - San Francisco CA, US
Charles S. Lingafelt - Durham NC, US
David P. Merrill - New Paltz NY, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/08
H04L 29/06

US Classification:

713153, 380278

Abstract:

Embodiments of the invention provide a solution for securing information within a Cloud computing environment. Specifically, an encryption service/gateway is provided to handle encryption/decryption of information for all users in the Cloud computing environment. Typically, the encryption service is implemented between Cloud portals and a storage Cloud. Through the use of a browser/portal plug-in (or the like), the configuration and processing of the security process is managed for the Cloud computing environment user by pointing all traffic for which security is desired to this encryption service so that it can perform encryption (or decryption in the case of document retrieval) as needed (e.g., on the fly) between the user and the Cloud.

US Patent:

20140324910, Oct 30, 2014

Filed:

Jun 6, 2013

Appl. No.:

13/912086

Inventors:

- Redwood Shores CA, US
Tong Zhou - Merrick NY, US
Douglas Surber - Orinda CA, US
Stephen Felts - Denville NJ, US
David Merrill - San Francisco CA, US

International Classification:

G06F 17/30

US Classification:

707781

Abstract:

A system and method for connection labeling for use with connection pools. In accordance with an embodiment, the system comprises a connection pool, including a plurality of connection objects which provide connections that software applications can use to make requests to access the database, wherein each of the connections can be labeled according to the configuration of particular applications; and a connection pool logic that identifies connections labeled as high-cost connections, and avoids using those high-cost connections to serve requests when the total number of connections is below a particular threshold value.

US Patent:

20140324911, Oct 30, 2014

Filed:

Jun 6, 2013

Appl. No.:

13/912098

Inventors:

- Redwood Shores CA, US
Tong Zhou - Merrick NY, US
Douglas Surber - Orinda CA, US
Stephen Felts - Denville NJ, US
David Merrill - San Francisco CA, US

International Classification:

G06F 17/30

US Classification:

707781

Abstract:

A system and method for connection labeling for use with connection pools, including support for cloud-based multi-tenant environments using connection labeling. In accordance with an embodiment, the system comprises a connection pool, including a plurality of connection objects which provide connections that software applications can use to make requests to access the database, wherein each of the connections can be labeled according to the configuration of particular applications; and a connection pool logic that identifies connections labeled as high-cost connections, and controls the creation or repurposing of high-cost connections to serve requests from the multiple tenants or tenant applications.