Novell, Inc.

Other

Apple Inc.

Emc Corporation

Daniel S Sanders

Andrew A Hodgkinson

Scott W Pathakis

James Gerald Sermersheim

James R Davis, Iii

Duane Fredrick Buss

James Mark Norman

Patrick R Felsted

Thomas E Doman

W Brent Bradshaw

Brian L Jensen

Dale Robert Olds

Stephen R Carter

Lloyd Leon Burch

John Paul Gassner

Steven S McLain

David Gordon Corlette

Brian Hawkins

Marcia Sanders

System and method for efficient maintenance of indexes for XML and other documents comprising semi-structured, hierarchical data are described. In one embodiment, the method comprises providing a first index definition document ('IDD') for defining a first index for the document, wherein the first IDD is applied to the document to create a first set of index keys for the document stored in the database and wherein the first IDD defines at least one set of relationships among nodes in the document; responsive to a change to the document affecting an update node thereof, performing a limited, localized traversal of the document around the update node to determine whether the change affects the first set of index keys; and updating the first set of index keys as necessitated by the change.

System and method for efficient maintenance of indexes for XML files

System and method for facilitating user authentication of web page content are described. In one embodiment, the method comprises receiving a request from a web browser for web page content; and responsive to receipt of the request, providing to the web browser the requested web page content and associated digitally signed content; wherein prior to display of the web page content by the web browser, the digitally signed content is evaluated by a plug-in portion of the web browser to determine whether the digitally signed content is verified, indicating that a provider of the web page content is trustworthy.

System and method for facilitating user authentication of web page content

A computer-implemented method can include selecting an information card from a group of identified information cards, selecting a persona from a group of identified personae that are associated with the selected information card, and generating a Request for Security Token (RST) based on the selected information card and the selected persona.

Multiple persona information cards

The user can associate metadata with information cards. The metadata can include, among other possibilities, string names, icons, user policies, containers, and hierarchies. The metadata is stored by the computer system. The metadata can then be used to filter the set of information cards that can satisfy a security policy from a relying party.

Credential categorization

A selector daemon can run in the background of a computer. Applications that are capable of processing information cards directly, without requiring the use of a card selector, can request the selector daemon to list information cards that satisfy security policy. Upon receiving such a request, selector daemon can determine the information cards available on the computer that satisfy the security policy, and can identify these information cards to the requesting application. The applications can then use the identified information cards in any manner desired, without having to use a card selector: for example, by requesting a security token based on one of the information cards directly from an identity provider.

System and method for application-integrated information card selection

A syslog message routing system can include multiple syslog sources, a syslog message routing module, and multiple syslog parsers. The syslog message routing module can receive a syslog message from one of the syslog sources, identify a particular syslog parser to handle the syslog message, and send the syslog message to the selected syslog parser. The syslog message routing module can identify the syslog parser by applying at least one of an application ID-based policy, a unique pattern matching rule policy, and a universal syslog parser policy.

Syslog message routing systems and methods

A user engages in a transaction with a relying party. The relying party requests identity information from the user in a security policy and identifies transaction elements for an on-line business transaction. Typically, the security policy and transaction elements are transmitted together; the security policy can be as little as a request to conduct the on-line business transaction. The user identifies an information card that satisfies the security policy. The computer system requests a security token from the identity provider managing the information card, which can include requesting a transaction receipt for the transaction elements. The computer system then returns the security token (and the transaction receipt) to the relying party, to complete the transaction.

Performing a business transaction without disclosing sensitive identity information to a relying party

A machine includes card stores to store information cards. For each card store, one or more card selectors can be provided. When performing a transaction involving information cards, a generic card selector, using a selector policy engine, can identify a card selector to use for the transaction. The identified card selector can be used to identify an information card in a card store to use in performing the transaction, which can be used to provide a security token to the relying party.

Chaining information card selectors

An accessor function interfaces among a client, a relying party, and an identity provider. The identity provider can 'manage' personal (i.e., self-asserted) information cards on behalf of a user, making the personal information cards available on clients on which the personal information cards are not installed. The client can be an untrusted client, vulnerable to attacks such as key logging, screen capture, and memory interrogation. The accessor function can also asked as a proxy for the relying party in terms of invoking and using the information cards system, for use with legacy relying parties.

Remotable information cards

When a user connects a pluggable card store to a machine, the machine plugs a pluggable card provider into a card provider registry. The pluggable card store can be an object portable to the user, or can be a remote store available via some connection, such as an FTP connection. The user can then use the information cards stored on the pluggable card store in a transaction.

Framework and technology to enable the portability of information cards

A system and method is presented for database restoration in a distributed data system. The distributed data system has a first database on a first server which needs restoration. The first database is first restored with a predetermined full backup file, the full backup file being made at a first predetermined time. The first database is then restored with one or more incremental backup files, the incremental backup files being made since the first predetermined time and having the most recent backup file made at a second predetermined time. A transaction log documenting data transactions since the second predetermined time is then examined. One or more transactions listed in the transaction log after the second predetermined time are then executed since they are not included in the incremental backup files. To verify whether the restored first database has completed its restoration, a transitive vector of the first database is compared with a transitive vector of a second database on a second server of the distributed database system, wherein the second database and the restored first database are expected to be the same.

System and method for restoring a database in a distributed database system

Operator for correlated predicates in a query

A toothbrush sterilization unit for sterilizing the bristle-head of at least one toothbrush with a disinfectant. The toothbrush sterilization unit includes a housing having an interior compartment. The interior compartment includes a plurality of docking stations for holding in place a plurality of toothbrushes. The housing includes a pumping system assembly for dispensing a disinfectant on the bristle-heads of the toothbrushes during a dispensing cycle. The housing also includes a rotary fan and a heating member for drying the disinfectant on the bristle-heads of the plurality of toothbrushes during a drying cycle.

Growing community of inventors

Orem, UT, United States of America

Daniel S Sanders