Novell, Inc.

Adobe, Inc.

Brian Lee Jarvis

Bruce Warner Thorne

Trevor Paulsen

DeeAnne Barker Higley

Ivan Andrus

Mark Andrew Hinckley

Layne C Izatt

David Wilcox

Jeffrey Todd Hawkins

Vladislav Turchenko

Dirk DeHart

The present disclosure relates to performing attribution channel modeling in real time using touchpoint data that corresponds to a user-specified set of channels and is retrieved from a database using a user-specified attribution model. For example, in one or more embodiments, a system stores raw data in an attribution database that comprises an aggregator and a plurality of nodes. In particular, each node stores touchpoint data associated with a different user. Upon receiving a query, the system can, in real time, retrieve subsets of the touchpoint data that corresponds to a user-defined set of distribution channels in accordance with a user-specified attribution model. The system then combines the subsets of touchpoint data using the aggregator and generates the digital attribution report using the combined data.

Performing query-time attribution channel modeling

System and method for implementing a forward compatibility syntax in a directory services environment is described. In one embodiment, data comprising an attribute according to a new syntax that is supported by newer servers, but not by older servers, is separated into data with respect to which referential integrity is not a concern (hereinafter &ldquo;blob data&rdquo;) and data with respect to which referential integrity is a concern (hereinafter Distinguished Names (&ldquo;DNs&rdquo;)). The two types of data are then combined according to a forward compatibility (&ldquo;FC&rdquo;) syntax that is supported by both older and newer servers. Only certain, newer, servers understand and convert between the FC syntax and the actual new syntax; older servers are capable of supporting the FC syntax without needing to understand it.

Method of implementing a forward compatibility network directory syntax

Methods, signals, devices, and systems are provided for controlling access to objects and their attributes in a database. The database may be hierarchical, or it may have positional relationships based on a graph structure. In a hierarchical database possible positional relationships include &ldquo;child&rdquo;, &ldquo;parent&rdquo;, &ldquo;grandchild&rdquo;, and so on. A trustee field in an access control property of a target object is furnished with the positional relationship. A positional relationship is evaluated when an access request is made, and the binding of trustee object identifiers with particular targets through access control properties is thereby delayed until such binding is necessary to determine if the access request should be granted. The delayed binding may be combined with inheritance, with conventional access control lists, and with other familiar tools and techniques to enhance access control in the database of objects.

Access control with delayed binding of object identifiers

A computer system comprises a management service having a plurality of objects. Each of the objects has at least one associated attribute with associated values. A master object in the management service includes a source attribute with associated data. One or more slave objects in the management service correspond to the master object and are distinct from the master object. Each of these slave objects has a destination attribute which corresponds to the source attribute of the master object. A propagation agent is capable of accessing the slave objects and transmitting the data associated with the source attribute to the destination attributes of the slave objects.

Method and apparatus for directed data propagation

A method for a source to obtain the rights of a target object is disclosed. The source first obtains the rights of a source object, which rights include authorization to access a target object and to modify authentication data of the target object. Next, the source object generates new authentication data. After accessing the target object using the rights of the source object, the source modifies the authentication data of the target object to include the new authentication data. Using the new authentication data, the source obtains the rights of the target object, whereby the source becomes a proxy for the target object. As a proxy, the source uses the rights of the target object. Alternative processes for proxy authentication, as well as apparatus for proxy authentication, are also disclosed.

Method and apparatus for proxy authentication

A policy-driven network traffic manager recommends to individual application programs that generate network traffic whether, and optionally under what conditions, they should generate network traffic. The network traffic manager has an interface, through which the application programs, prior to generating network traffic, call the network traffic manager and describe the traffic the application programs propose to generate. A policy repository stores a set of policies, which the network traffic manager uses to ascertain whether the application programs should generate the proposed network traffic. The policies can include considerations such as time, link cost, latency, congestion and availability. The network traffic manager then sends the recommendations to the application programs.

Growing community of inventors

Orem, UT, United States of America

Brian Lee Jarvis