Novell, Inc.

Oracle International Corporation

Micro Focus Software Inc.

Other

Apple Inc.

Dale Robert Olds

Stephen R Carter

Lloyd Leon Burch

Carolyn Bennion McClain

Ranjan Prasad

Jared Patrick Allen

DeeAnne Barker Higley

Lee Edward Lowry

Duane Fredrick Buss

Andrew A Hodgkinson

Daniel S Sanders

Kevin W Kingdon

James Gerald Sermersheim

Patrick R Felsted

Thomas E Doman

Paul Alexandre Turner

Randal Earl Childers

Robert Mark Ward

Layne C Izatt

Matthew G Brooks

Mark Andrew Hinckley

Jaimon Jose

Renea Berry Campbell

Robert Carey Ireland

Systems and methods are described that support information security and sub-system operational conformance with protocols. In some embodiments, agent access to resources can be controlled via generation of credentials and/or tokens and/or conditioned external authentication. In some embodiments, workflows used to assess protocol conformance can be conditionally triggered at sub-systems.

Systems and methods for supporting information security and sub-system operational protocol conformance

System and method for providing cloud computing services are described. In one embodiment, the system comprises a cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external address to the internal cloud addresses of the cloud workloads. A designated one of the cloud workloads obtains one key of a first pair of cryptographic keys, the first pair of cryptographic keys for decrypting encrypted storage hosted within the cloud computing environment.

System and method for providing key-encrypted storage in a cloud computing environment

Crafted identities are provided. A statement is provided to the principal for using a crafted identity. The statement includes an identifier that provides access to a resource when presented by the principal to the resource. The statement also includes one or more roles and permissions for the crafted identity when accessing the resource.

Crafted identities

System and method for implementing cloud mitigation and operations controllers are described. One embodiment is a system for controlling operation of a cloud computing environment, wherein the system comprises a repository for storing data regarding characteristics of the cloud computing environment, wherein the stored data includes policy notations designating compliance or noncompliance of the data with policy; an analyst module for analyzing the stored data in combination with external report information regarding the cloud computing environment and for providing results of the analysis; and a controller for evaluating the analysis results and issuing instructions for controlling operation of the cloud computing environment based on the evaluating.

System and method for implementing cloud mitigation and operations controllers

System and method for implementing a workflow of a first domain, wherein the workflow is implemented as a series of steps to accomplish a workload and wherein at least one of the steps utilizes a process, are described. In one embodiment, the method comprises establishing a mutual trust relationship between the first domain and a second domain; wherein one of the steps is authored by the second domain, the method further comprising associating with the step authored by the second domain a digital attestation for enabling the first domain to verify authorship and non-modification thereof.

System and method for implementing a cloud workflow

System and method for providing cloud computing services are described. In one embodiment, the system comprises a cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external cloud address to the internal cloud addresses of the cloud workloads. The routing system comprises a virtual router configured to function as a network address translator ('NAT'); a distributor connected between the virtual router and the cloud workloads; and a distributor registry accessible by the distributor for maintaining information comprising at least one of port mappings, cloud address mappings, and cloud workload configuration information.

System and method for reducing cloud IP address utilization using a distributor registry

A user engages in a transaction with a relying party. The relying party requests identity information from the user in a security policy and identifies transaction elements for an on-line business transaction. Typically, the security policy and transaction elements are transmitted together; the security policy can be as little as a request to conduct the on-line business transaction. The user identifies an information card that satisfies the security policy. The computer system requests a security token from the identity provider managing the information card, which can include requesting a transaction receipt for the transaction elements. The computer system then returns the security token (and the transaction receipt) to the relying party, to complete the transaction.

Performing a business transaction without disclosing sensitive identity information to a relying party

System and method for providing cloud computing services is described. In one embodiment, the system includes a cloud computing environment, the cloud computing environment comprising resources for supporting cloud workloads, each cloud workload having associated therewith an internal cloud address; and a routing system disposed between external workloads of an external computing environment and the cloud workloads, the routing system for directing traffic from an external address to the internal addresses of the cloud workloads.

System and method for reduced cloud IP address utilization

System and method for transparent cloud access are described. In one embodiment, the system comprises an enterprise computing environment maintained by an enterprise and a cloud computing environment maintained by a cloud provider; and a secure bridge mechanism for interconnecting the enterprise computing environment and the cloud computing environment. The secure bridge mechanism comprises a first secure bridge portion associated with the enterprise and a second secure bridge portion associated with the cloud computing environment. The first and second secure bridge portions interoperate to provide transparent and secure access by resources of one of the computing environments to those of the other computing environment.

System and method for transparent cloud access

Methods, systems, and schema are provided for enforcing security on an attribute of an object. An instance of an object is created or modified using the schema where a number of the attributes for the object include descriptors. The attributes of the created or modified object are checked to ensure that the modifier has access rights to the attributes. If the modifier does not have the access rights, then values are not assigned to the attributes requested by the modifier. When the modifier provides values for an attribute having the corresponding descriptor, the values are also checked to determine if they are references to a second object. In which case, a check is made to ensure the modifier has an access right to the second object. If no such access right exists, then the values are not assigned to the attribute as originally requested by the modifier.

Enforcing security on an attribute of an object

A system and method for synchronizing database information over a communications network distributed among a plurality of servers. The system allows each server to track the state of a replica on each of the servers, and changes to the servers are communicated between the servers along with their states. The states may be stored as an array of timestamps, the timestamps each indicating a time at which the replica on each server was updated. In a network wherein two servers (a first and third server) cannot communicate directly, a first network server transmits a change to an intermediate (a second) server including its state information. The second server transmits the change to the third server, and the third server updates its replica. The third server transmits its state information to the second server, and the timestamp information is conveyed to the first server. The state information of the third server may be transmitted to the second server during later updates of the third server's replica. The first server, by receiving the third server's state information, can determine that the change in replica information was performed on the third server. The synchronization system and method may be used to transmit changes, such as those involved in a partitioning operation.

System and method for synchronizing database information

Distributed Reference Links (&ldquo;DRLs&rdquo;) for managing the referential integrity between objects in a distributed directory server system are described. In a preferred embodiment, DRLs specify a set of attributes, precedents, and algorithms that define how a resource can notify other resource managers of a change in the identity information of one of its objects. Using DRLs, before an external reference to an object is created, a &ldquo;UsedBy&rdquo; attribute identifying the partition that will include contain the external reference is added to any R/W replica of the object prior to the creation of the external reference object.

Growing community of inventors

Draper, UT, United States of America

Dale Robert Olds