Sprint Communications Comapny L.p.

David K Fultz

Vijaykumar Cherukumudi

Shrikant D Jannu

Richard A Rofail

Nadirshah N Jivani

Nathan M Schwermann

Lesley Cranor

Victor Anend Vijayakirthi

M Jeffrey Stone

Dhananjay Indurkar

Kemi Y Ibitayo

Jeffrey S Callan

Srinivas Pogiri

Laura Haverkamp

John C Crews

Anuradha S Ramanujan

Alan Hsin

The system comprises a mobile device comprising an application and a display screen, wherein the display screen displays a previously inserted program icon at a display screen location. The application, when executed, identifies the receipt of a virtual pre-load pack by the mobile device, compares the virtual pre-load pack template with a current display screen template, identifies that the proposed display screen location of the virtual pre-load program icon overlaps with the display screen location of a previously inserted program icon, locates and selects an unoccupied display screen location for the insertion of the virtual pre-load program icon and inserts the virtual pre-load program icon in the unoccupied display screen location on the display screen without overlapping the display of the virtual pre-load program icon with the display of the previously inserted program icon and without violating a display screen insertion priority level.

System and method for inserting additional icon content into a display screen

A method of installing an application on a mobile communication device which comprises receiving, on a mobile communication device, a selection of a virtually preloaded application, identifying the repository from a plurality of repositories, communicating with the repository to obtain the full application, identifying a first location of an icon associated with the virtually preloaded application on the mobile communication device, relocating the icon associated with the virtually preloaded application to a second location, and installing the full application on the mobile communication device. The virtually preloaded application corresponds to a full application available in a repository.

Virtual preloads

A system is provided for environment validation. The system includes a user interface, a repository, and a validation tool. The repository includes environment component information. The validation tool accesses environment component information in the repository and validates each keystore associated with an environment. The validation tool also validates each port associated with the environment and validates each database associated with the environment. Additionally, the validation tool validates each message service associated with the environment and validates each interface associated with the environment. Furthermore, the validation tool outputs results of validating each environment component to the user interface.

Environmental validation tool

A location aware session token generation and validation system is provided. The system comprises a server system comprising at least one processor. The server system also comprises at least one non-transitory memory. The system further comprises a token component stored on the at least one non-transitory memory that, when executed by the server system, receives a request to initiate an application level session from a mobile device, wherein the request includes an identification of the mobile device and a location of the mobile device, generates a token for the application level session wherein the token is time limited and location limited such that the application level session will expire at the end of a specified period of time or when the mobile device moves from the location.

Location awareness session management and cross application session management

A system for end-to-end communication service monitoring is provided. The system comprises a processor, a memory, and a monitoring application stored in the memory. The memory also stores a resource dependency matrix, wherein the resource dependency matrix describes dependencies between a plurality of network and functional resources. When executed by the processor, the application registers a first client device for periodic notifications of a status of a network resource, monitors a metric associated with a first component of the network resource and monitors a metric associated with a second component of the network resource, determines a status of the network resource based on the metric associated with the first component, based on the metric associated with the second component, and based on the resource dependency matrix, and publishes a notification of the first status.

End-to-end communication service monitoring and reporting

A system is provided comprising at least one processor, a memory, and an application stored in the memory that, when executed, receives a first request from a client device for access to a first web service and accesses a policy associated with the first web service. The system also selects a second plurality of data elements from a first plurality of data elements based on the first request and based on the policy wherein the second plurality of data elements is associated with the first web service. The system also provides the second plurality of data elements to the client device and receives a second request from the client device for a first set of data values associated with the second plurality of data elements. The system also authenticates the second request and provides the first set of data values in response to the second request.

Transformation of extensible markup language documents for web services customization

A system is provided. The system comprises a processor, a memory, and an authorization application stored in the memory that, when executed by the processor, receives a first message from a first client device associated with a first domain, the first message containing a request to emulate a second client device associated with a second domain. The system also determines authorization for the first device to emulate the second device in the second domain. The system also associates an electronic cookie with a browser session initiated by the first device, the electronic cookie associated with access to the second domain. The system also provides the first device authorization to emulate the second device in the second domain using a generic login account wherein the second domain provides the first device limited cross-domain access based on the electronic cookie to targeted information associated with the second device.

Identity abstraction providing limited cross-domain access

A system is provided for managing digital certificates. The system includes a host system, which includes a user interface, a plurality of disparate host certificate stores, and a management tool. The plurality of disparate host certificate stores includes a plurality of host server certificates. The management tool retrieves a copy of one of the plurality of host server certificates from any of the plurality of disparate host certificate stores, provides the copy of the one of the plurality of host server certificates to a partner system for loading in a partner certificate store, communicates with the partner system to validate the one of the plurality of host server certificates, and outputs a host server certificate message to the user interface.

Managing digital certificates

A password generation and validation system is provided. The system comprises a server system and an at least one memory. The system also comprises a password component stored in the at least one memory that, when executed by the server system, receives a plurality of inputs, generates a first password for a computer system based on the plurality of inputs contemporaneously with receiving the plurality of inputs, receives a second password, generates at least one candidate password based on some of the plurality of inputs, and validates the second password when the second password matches the at least one candidate password.

Password generation and validation system and method

A computer implemented method for providing enhanced customer support is provided. The method comprises a replication server selecting a plurality of first entries in a source lightweight directory access protocol (LDAP) data store based on at least one attribute of the selected entries matching a predefined criteria, wherein a structure of the first entries is defined by a first schema. The method also comprises the replication server copying a plurality of attributes of each of the selected entries into a target lightweight directory access protocol data store, wherein the target lightweight directory access protocol data store contains a plurality of second entries, wherein a structure of the second entries is defined by a second schema, wherein the first schema is different from the second schema, and wherein the plurality of attributes copied do not include all of the attributes defined by the first schema.

Conditional fractional data store replication

A system for directory replication and integration is provided. The system comprises a computer system and an application, that when executed on the computer system, analyzes a first structure of a first directory services database and generates a plurality of configuration files based on the analysis of the first structure of the first directory services database. The system also creates a second structure using the configuration files and tests the second structure using load and performance profiles and adjusts the second structure based on the results of the tests. The system also replicates entries in first directory services database to a second directory services database according to the second structure.

Directory services integration and replication system

A system for customer data privacy management is provided. The system includes a data store having customer data and privacy rules associated with the customer data, a rules engine that limits access to the customer data, an application to provide a service related to the customer data, and an interface in communication with the application and the rules engine. The rules engine promotes limiting access to customer data based on the service of the application and the privacy rules associated with the customer data. The customer data includes mobile location information and positioning information. The service of the application may be further defined as a mobile location service. The customer data includes a buddy list and one or more of the privacy rules can be associated with the buddy list to limit access by one or more applications to the buddy list.

Rules engine architecture and implementation

The present system allows disparate secure applications to communicate directly with one another in a heterogeneous application environment by providing for the creation of tokens that can be passed between the applications without human intervention. Security information is passed between applications in the form of a token with a string data type. Since a string is a primitive data type, it can be recognized by a large number of applications and interfaces. The token has no header and therefore no application-specific header configuration, making it platform and technology independent. This eliminates the need for conversion of security information between different formats. The use of tokens also eliminates the need for an application to be authenticated and authorized every time it sends a message to another application. Instead of a permanent context or session, a context is created with every invocation from one application to another.

Application-to-application security in enterprise security services

A system to validate a request for web services which includes a digital certificate is provided. The system includes a first certification authority that provides a public encryption key and a certificate revocation list in response to requests. The system also includes a certification revocation list component that determines whether a digital certificate is named in the certification revocation list, a certificate verification component that determines whether a digital certificate is valid, a plurality of verifier components that determine the validity of a request for web services and each of which operates in accordance with a different one of a plurality of OASIS Web Services Security versions. The system also includes a management component to determine the version of the OASIS Web Service Security version of the web services request and to select an appropriate verifier component.

Web services security architecture

A system is provided for monitoring one or more applications. The system includes a data store to maintain data, such as logs stored in a log file, describing transactions involving at least one of the applications. Some of the data includes context specific information which may be of varying length or content. The system includes agents, adapters, a controller, and a console. The agents communicate the data to the data store according to a configured delivery method. The adapters receive the data from the applications and forward the data to one of the agents. The controller manages the agents and is operable to analyze the data. The console is coupled to the controller to receive command inputs from a user to provide the analysis of the data to the user.

Growing community of inventors

Raymore, MO, United States of America

David K Fultz