David C Merrill

US Patent:

20110219434, Sep 8, 2011

Filed:

Mar 4, 2010

Appl. No.:

12/717202

Inventors:

Linda N. Betz - Poughkeepsie NY, US
Wesley J. Ho - San Francisco CA, US
Charles S. Lingafelt - Durham NC, US
David P. Merrill - New Paltz NY, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 9/32
G06F 21/00

US Classification:

726 5, 726 3

Abstract:

Embodiments of the present invention allow for the provisioning of security services within a Cloud computing environment by third parties. Specifically, under the present invention, a Cloud provider will publish a set of potential security attributes (e.g., a list), which can be monitored, to the Cloud customer. The Cloud customer will designate/select one or more of those attributes that the Cloud customer wishes to have monitored for one or more Cloud resources that it is using. The Cloud provider will then provide to the Cloud customer a set of third party security service providers capable of monitoring the attributes the Cloud customer designated. The Cloud customer will then select one or more third party providers from the provided set, and the Cloud provider will associate the given Cloud resources with the respective third party providers. Once third party providers have been associated with Cloud resources, a secure relationship between the third party provider(s) and the Cloud providers will be established.

US Patent:

20110264907, Oct 27, 2011

Filed:

Apr 27, 2010

Appl. No.:

12/768106

Inventors:

Linda N. Betz - Poughkeepsie NY, US
Wesley J. Ho - San Francisco CA, US
Charles S. Lingafelt - Durham NC, US
David P. Merrill - New Paltz NY, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/08
H04L 29/06

US Classification:

713153, 380278

Abstract:

Embodiments of the invention provide a solution for securing information within a Cloud computing environment. Specifically, an encryption service/gateway is provided to handle encryption/decryption of information for all users in the Cloud computing environment. Typically, the encryption service is implemented between Cloud portals and a storage Cloud. Through the use of a browser/portal plug-in (or the like), the configuration and processing of the security process is managed for the Cloud computing environment user by pointing all traffic for which security is desired to this encryption service so that it can perform encryption (or decryption in the case of document retrieval) as needed (e.g., on the fly) between the user and the Cloud.