Novell, Inc.

Symantec Corporation

Bill Guy Bodine

Randall Richards Cook

Nicholas Huston Franklin

Matthew G Brooks

Paul MacKay

Calvin R Gaisford

Kelly Ervin Sonderegger

Karl Bunnell

Carla M Heesch

A computer-implemented method for replacing sensitive information stored within non-secure environments with secure references to the same may include (1) identifying sensitive information stored within a non-secure environment on a computing device, (2) removing the sensitive information from the non-secure environment, (3) storing the sensitive information within a secure environment, (4) replacing the sensitive information originally stored within the non-secure environment with a reference that identifies the sensitive information stored within the secure environment, (5) identifying a request to access at least a portion of the sensitive information identified in the reference, (6) determining that at least a portion of the request satisfies a data-loss-prevention policy, and then (7) providing access to at least a portion of the sensitive information via the secure environment. Various other systems, methods, and computer-readable media are also disclosed.

Systems and methods for replacing sensitive information stored within non-secure environments with secure references to the same

A system and method for opening a file in a virtualization workspace of a host computer system. The host computer system includes a virtualization workspace including a virtualization agent and virtual software layers. The virtualization agent detects a request to open a file in the virtualization workspace. In response to detecting the request, the virtualization agent determines that the file includes embedded metadata. The virtualization agent uses the embedded metadata to identify a virtual software layer in which to open the file, activates the virtual software layer, and opens the file using an application that is included in the identified virtual software layer. The virtual software layer includes one or more applications and the embedded metadata includes a signature corresponding to one of the applications with which to open the file. The identified virtual software layer is installed on the host computer system subsequent to being identified.

Method of using an encapsulated data signature for virtualization layer activation

A directory services system includes a resource object, such as an application object for accessing a resource associated with the resource object. Attributes of the resource object contain licensing control information. The licensing attributes may be used by executables to control access by a user to properly licensed instances of a resource corresponding to the resource object. Also, a utility may be provided to manage the licensing attributes in the resource object. A licensing function may thus control a resource, via its resource object in the directory services database. Licensing maybe easily implemented by setting a new disabling attribute in the object.

Licensing controller using network directory services

A directory services system includes a resource object, such as an application object for accessing an actual resource associated with the resource object. Rights attributes of the resource object reflects information for controlling rights of a user (or entity) to access the actual resource. The rights attributes may include criteria for distribution. The rights attributes may be used to rapidly, dynamically, remotely, and easily define and control access to available instances of a resource object based on certain criteria, such as organization, membership, etc. A utility (snap-in) module may be relied upon to manage the values of the attribute. Application programming interfaces (executables) in a dynamically linked library may be provided to 'consume' (use) the attributes in the resource objects stored in directory services database.

Dynamic rights assignment apparatus and method using network directory

A directory services system includes resource objects, such as an application object for accessing a resource associated with the resource object. Foldering attributes may be provided or added to an existing or new, specialized resource object. Foldering attributes reflect correspondence of the actual resources to an organizational scheme. The foldering attributes may include not only linking and backlink information, but management data for multiple levels of linking and organization, all stored in a Network Directory Services resource object. A resource, via its resource object in the directory services database, may be easily assigned to an organizational position for an individual user, a group, container, or the like. A snap-in module may be created, having executables as one or more Application Programming Interfaces (API's) in a Dynamic Link Library (DLL) for consuming (using) the foldering attributes. A utility may be provided in the Directory Services Systems' Administration module, or as on of such modules, to create and manage the foldering attributes. In certain embodiments attributes may be in objects requiring no methods embedded therein. In other embodiments methods in resource objects may contain additional executables or even obviate API's in the DLL.

Growing community of inventors

Orem, UT, United States of America

Bill Guy Bodine