公开(公告)号：JP2007164789A

公开(公告)日：2007-06-28

申请号：JP2006332338

申请日：2006-12-08

Applicant: Internatl Business Mach Corp ,  インターナショナル・ビジネス・マシーンズ・コーポレーションInternational Business Maschines Corporation

Inventor： KUSSMAUL TIMO ,  ARNING ANDREAS

IPC: G06F17/30 ,  G06F3/048 ,  G06F19/00 ,  G06Q10/00

CPC classification number: G06F17/3089 ,  G06F17/30873 ,  Y10S707/99948

Abstract: PROBLEM TO BE SOLVED: To provide an improved method and system for designing a Web portal including a hierarchical structure of portal pages and portlets for accessing Web contents accessible via the portal. SOLUTION: Due to the complexity of an enterprise portal, manual administration is inefficient as it is time-consuming, error-prone and thus expensive. In order to overcome these disadvantages, it is proposed that a portal according to this invention performs some mining (420) to the portlet markup and/or that of the portlet description in order to autonomously compute (430) and propose an enhanced portal content structure (440). This helps to provide a user-friendly content structure that reflects well the relationships between portlets. COPYRIGHT: (C)2007,JPO&INPIT

Abstract translation: 要解决的问题：提供一种用于设计门户网站的改进方法和系统，包括门户页面和门户网站的分层结构，用于访问可通过门户访问的Web内容。 解决方案：由于企业门户的复杂性，手工管理效率低下，因为耗时，容易出错，因而成本高昂。 为了克服这些缺点，提出根据本发明的门户对portlet标记执行一些挖掘（420）和/或Portlet描述，以便自主计算（430）并提出增强的门户内容结构 （440）。 这有助于提供一个良好反映portlet之间关系的用户友好的内容结构。 版权所有（C）2007，JPO＆INPIT

公开(公告)号：JP2007102788A

公开(公告)日：2007-04-19

申请号：JP2006270269

申请日：2006-10-02

Applicant: Internatl Business Mach Corp ,  インターナショナル・ビジネス・マシーンズ・コーポレーションInternational Business Maschines Corporation

Inventor： KUSSMAUL TIMO ,  HADDORP HENDRIK

IPC: G06F13/00

CPC classification number: H04L51/34 ,  G06Q10/107 ,  H04L51/12

Abstract: PROBLEM TO BE SOLVED: To provide a method to automatically determine user specific relevance score of a message within a messaging system. SOLUTION: The method comprises the steps of analyzing the meta-information of the message with respect to correlations of the message with other messages, recording and classifying the correlations of the message with the other messages, deriving from such identified and classified correlations a message model reflecting the correlations of the message with the other messages, monitoring how the message is processed, calculating a numerical relevance score for the message and assigning the calculated numerical relevance score to the respective node within the message model. COPYRIGHT: (C)2007,JPO&INPIT

Abstract translation: 要解决的问题：提供一种自动确定消息系统内的消息的用户特定相关性得分的方法。 解决方案：该方法包括以下步骤：针对消息与其他消息的相关性分析消息的元信息，记录和分类消息与其他消息的相关性，从这种识别和分类的相关性导出 反映消息与其他消息的相关性的消息模型，监视消息的处理方式，计算消息的数值相关性分数，并将计算的数值相关性分数分配给消息模型中的相应节点。 版权所有（C）2007，JPO＆INPIT

公开(公告)号：WO2005006703A3

公开(公告)日：2005-03-24

申请号：PCT/EP2004050864

申请日：2004-05-19

Applicant: IBM ,  HAGMEIER JOACHIM ,  BRUCHLOS JOACHIM ,  KUSSMAUL TIMO

Inventor： HAGMEIER JOACHIM ,  BRUCHLOS JOACHIM ,  KUSSMAUL TIMO

IPC: H04L29/06 ,  H04L29/08

CPC classification number: H04L63/0823 ,  H04L63/0884 ,  H04L67/02 ,  H04L69/22

Abstract: The idea of the present invention is to replace the existing password/user ID based authentication process by a new digital signature authentication process in which preferably the first HTTP-request header is extended by the client authentication information independently of the authentication process used by the destination server and without server requesting authentication information. The authentication information preferably includes the client certificate containing the client public key, signed by certification authority, and preferably a hash value calculated over the HTTP-request header data being sent in the request, and encrypted with the Client's private key. The certificate and digital signature may be added during the creation of the HTTP-request header in the client system itself, or may be added later in a server acting as a gateway, proxy, or tunnel. A destination server that does not support the new digital signature authentication process will simply ignore the certificate and digital signature in the HTTP-request header and will automatically initiate its own authentication process. The present invention simplifies the existing digital signature authentication process and concurrently allows the coexistence of different authentication processes without changing the HTTP-protocol or causing unnecessary network traffic.

Abstract translation: 本发明的思想是通过新的数字签名认证过程替换现有的基于密码/用户ID的认证过程，其中优选地，第一HTTP请求报头由客户端认证信息扩展，独立于目的地使用的认证过程 服务器，无服务器请求认证信息。 认证信息优选地包括包含由认证机构签名的客户端公钥的客户端证书，并且优选地包括在请求中发送的HTTP请求报头数据上计算的散列值，并且用客户端的私钥加密。 可以在客户端系统本身的HTTP请求头部的创建过程中添加证书和数字签名，或者可以在作为网关，代理或隧道的服务器中稍后添加。 不支持新的数字签名认证过程的目标服务器将简单地忽略HTTP请求头中的证书和数字签名，并自动启动自己的认证过程。 本发明简化了现有的数字签名认证过程，并且同时允许不同认证过程的共存而不改变HTTP协议或引起不必要的网络流量。

公开(公告)号：DE602004006648T2

公开(公告)日：2008-01-31

申请号：DE602004006648

申请日：2004-12-01

Applicant: IBM

Inventor： BRUCHLOS JOACHIM ,  HAGMEIER JOACHIM ,  KUEBLER DIETMAR ,  KUSSMAUL TIMO

IPC: H04L12/26 ,  G06Q30/00 ,  G07F19/00 ,  H04L12/14

Abstract: A utilization method and system within a communication network comprises at least one service provider and at least one service consumer. In particular, a there is license contract method and system for validating web services during runtime. At least one parameter is provided to define, if and how many meter event requests associated with service requests may be stored in a cache memory. The parameter is predefined and may be contained in the license contract. Further, a counter may be provided for counting the service requests. The actual status of the counter is sent to the service consumer and/or the service provider.

公开(公告)号：DE112022001088B4

公开(公告)日：2024-12-05

申请号：DE112022001088

申请日：2022-03-08

Applicant: IBM

Inventor： HANSMANN UWE KARL ,  EKAMBARAM VIJAY ,  MARVANIYA SMITKUMAR NAROTAMBHAI ,  KUSSMAUL TIMO ,  STOBER THOMAS ,  MONDAL SNEHA

IPC: G06Q50/10 ,  G06F40/35 ,  G06N3/04 ,  H04L51/02 ,  H04L51/21

Abstract: Computerrealisiertes Verfahren für eine elektronische Nachrichtenübermittlung, aufweisend:Empfangen (201) einer elektronischen Nachricht eines elektronischen Datenübertragungssystems, wobei die Nachricht für einen Empfänger ermittelt wird;Ermitteln (203) der Nachrichtenintentionen der empfangenen elektronischen Nachricht;Erzeugen (205) eines Störinhalts auf Bildgrundlage, wobei sich der Störinhalt auf Bildgrundlage von einem Inhalt der empfangenen elektronischen Nachricht unterscheidet und auf die Nachrichtenintentionen bezieht, wobei das Erzeugen des Störinhalts auf Bildgrundlage folgendes umfasst:Ermitteln (401) eines gemeinsamen Einbettungsbereichs zum Darstellen von elektronischen Nachrichten und Bildern, wobei die gemeinsame Einbettung durch Verwenden eines Hinge-Verlusts gelernt wird, um Bild und Text gemäß einer siamesischen neuronalen Netzwerkarchitektur (500) aufeinander abzustimmen;Darstellen (403) einer Textnachricht und eines vorab definierten Satzes von Bildern in dem Einbettungsbereich, wobei die Textnachricht die elektronische Nachricht oder eine weitere Nachricht mit Intentionen ist, die mindestens ein Teil der Nachrichtenintentionen sind;Ordnen (405) des Satzes von Bildern der Rangfolge nach auf Grundlage einer Ähnlichkeit zwischen den Darstellungen des Satzes von Bildern und der Darstellung der Textnachricht in dem Einbettungsbereich; undAuswählen (407) eines Teilsatzes von einem oder mehreren Störbildern des Satzes von Bildern auf Grundlage der Rangfolge, wobei der Störinhalt auf Bildgrundlage die Störbilder aufweist; undSteuern des elektronischen Datenverarbeitungssystems, um dem Empfänger anstatt der empfangenen elektronischen Nachricht den Störinhalt auf Bildgrundlage bereitzustellen (207) oder dem Empfänger zusätzlich zu dem Störinhalt auf Bildgrundlage die empfangene elektronische Nachricht bereitzustellen.

公开(公告)号：DE602004012870T2

公开(公告)日：2009-05-14

申请号：DE602004012870

申请日：2004-05-19

Applicant: IBM

Inventor： HAGMEIER JOACHIM ,  BRUCHLOS JOACHIM ,  KUSSMAUL TIMO

IPC: H04L29/06 ,  H04L29/08

Abstract: The idea of the present invention is to replace the existing password/user ID based authentication process by a new digital signature authentication process in which preferably the first HTTP-request header is extended by the client authentication information independently of the authentication process used by the destination server and without server requesting authentication information. The authentication information preferably includes the client certificate containing the client public key, signed by certification authority, and preferably a hash value calculated over the HTTP-request header data being sent in the request, and encrypted with the Client's private key. The certificate and digital signature may be added during the creation of the HTTP-request header in the client system itself, or may be added later in a server acting as a gateway, proxy, or tunnel. A destination server that does not support the new digital signature authentication process will simply ignore the certificate and digital signature in the HTTP-request header and will automatically initiate its own authentication process. The present invention simplifies the existing digital signature authentication process and concurrently allows the coexistence of different authentication processes without changing the HTTP-protocol or causing unnecessary network traffic.

公开(公告)号：AT391385T

公开(公告)日：2008-04-15

申请号：AT04741609

申请日：2004-05-19

Applicant: IBM

Inventor： HAGMEIER JOACHIM ,  BRUCHLOS JOACHIM ,  KUSSMAUL TIMO

IPC: H04L29/06 ,  H04L29/08

Abstract: The idea of the present invention is to replace the existing password/user ID based authentication process by a new digital signature authentication process in which preferably the first HTTP-request header is extended by the client authentication information independently of the authentication process used by the destination server and without server requesting authentication information. The authentication information preferably includes the client certificate containing the client public key, signed by certification authority, and preferably a hash value calculated over the HTTP-request header data being sent in the request, and encrypted with the Client's private key. The certificate and digital signature may be added during the creation of the HTTP-request header in the client system itself, or may be added later in a server acting as a gateway, proxy, or tunnel. A destination server that does not support the new digital signature authentication process will simply ignore the certificate and digital signature in the HTTP-request header and will automatically initiate its own authentication process. The present invention simplifies the existing digital signature authentication process and concurrently allows the coexistence of different authentication processes without changing the HTTP-protocol or causing unnecessary network traffic.

公开(公告)号：AT363169T

公开(公告)日：2007-06-15

申请号：AT04804639

申请日：2004-12-01

Applicant: IBM

Inventor： BRUCHLOS JOACHIM ,  HAGMEIER JOACHIM ,  KUEBLER DIETMAR ,  KUSSMAUL TIMO

IPC: H04L12/26 ,  G06Q30/00 ,  G07F19/00 ,  H04L12/14

Abstract: A utilization method and system within a communication network comprises at least one service provider and at least one service consumer. In particular, a there is license contract method and system for validating web services during runtime. At least one parameter is provided to define, if and how many meter event requests associated with service requests may be stored in a cache memory. The parameter is predefined and may be contained in the license contract. Further, a counter may be provided for counting the service requests. The actual status of the counter is sent to the service consumer and/or the service provider.

公开(公告)号：AU2021236960A1

公开(公告)日：2022-09-01

申请号：AU2021236960

申请日：2021-02-11

Applicant: IBM

Inventor： AGRAWAL SUGANDHA ,  KUSSMAUL TIMO ,  DAUR HARALD ,  TEICH TORSTEN

IPC: G06F12/00

Abstract: A computer-implemented method for controlling state updates in a cloud service environment may be provided. The method includes maintaining a set of state provider definitions, wherein each state provider definition comprising a set of required input variable definitions, a set of output variable definitions and related metadata. The method also includes determining a set of input variable definitions required by an invoked service, receiving the determined set of input variable definitions by the state provider management service, selecting a state provider definition, wherein the selected state provider definition is to be compatible with the received set of input variable definitions, determining a set of matching state provider services matching the selected state provider definition, scoring the determined set of state provider services, invoking the highest scoring state provider service, and passing the state data to the invoked service.

公开(公告)号：DE602004012870D1

公开(公告)日：2008-05-15

申请号：DE602004012870

申请日：2004-05-19

Applicant: IBM

Inventor： HAGMEIER JOACHIM ,  BRUCHLOS JOACHIM ,  KUSSMAUL TIMO

IPC: H04L29/06 ,  H04L29/08

Abstract: The idea of the present invention is to replace the existing password/user ID based authentication process by a new digital signature authentication process in which preferably the first HTTP-request header is extended by the client authentication information independently of the authentication process used by the destination server and without server requesting authentication information. The authentication information preferably includes the client certificate containing the client public key, signed by certification authority, and preferably a hash value calculated over the HTTP-request header data being sent in the request, and encrypted with the Client's private key. The certificate and digital signature may be added during the creation of the HTTP-request header in the client system itself, or may be added later in a server acting as a gateway, proxy, or tunnel. A destination server that does not support the new digital signature authentication process will simply ignore the certificate and digital signature in the HTTP-request header and will automatically initiate its own authentication process. The present invention simplifies the existing digital signature authentication process and concurrently allows the coexistence of different authentication processes without changing the HTTP-protocol or causing unnecessary network traffic.