Vignette Corporation

Rpx Corporation

Other

Rocksteady Technologies, LLC

Open Text Sa Ulc

Open Text S.a.

Vignette Software LLC

University of Texas System

Performance Accountability, LLC

Eric R White

Patrick Turley

Conleth S O'Connell, Jr

N Isaac Rajkumar

Keith P Johnston

John Martin

Kelly Looney

Richard B MacKinnon

John Boyd

Puhong You

Claiborne Holt Johnson, Iii

John H Martin

Christopher Alan Hajdu

Phillip Bookert

Sheila Rosenberg

John D Dwyer

Isaac Rajkumar

A file-mapping method and system can better manage the number of items (i.e., files, subdirectories, or a combination of them) within any single directory within a storage medium. The method and system can be used to limit the number of items within the directory, direct content and content components to different directories, and provide an internally recognizable name for the filename. When searching the storage medium, time is not wasted searching what appears to be a seemingly endless list of filenames or subdirectory names within any single directory. A client computer can have requests for content fulfilled quicker, and the network site can reduce the load on hardware or software components. While the method and system can be used for nearly any storage media, the method and system are well suited for cache memories used with web servers.

System, method and storage medium for managing items within file directory structure

A control device may be configured to monitor a network connection. An application running on a client device may send a first network communication destined for a network communicatively connected to the control device. Depending upon whether the client device is authorized to access the network, different global rules may be applied. The first application or a second application running on the client device may send a second network communication. The control device may process the second network communication according to a plurality of stages. Specifically, the control device may extract information associated with the client device from the second network communication and associate user specific rules at a client discrimination stage. The control device may, at a user specific rule stage, access these rules and apply accordingly to the second network communication as governed by user specific provisioning rules.

System and method for providing access control

Embodiments disclosed herein provide a system, method, and computer program product for establishing a secure network connection between a client and a server. The client may send a connection request over a public network to the server. The server may prepare a response containing a controller and session-specific credentials. The controller may be selected to configure a tunneling protocol on the client. After being downloaded to the client, the controller configures the tunneling protocol and establishes a secure network connection with the server without user intervention. The session-specific credentials are valid until the secure network connection between the client and the server is severed.

System and method for providing a secure connection between networked computers

A system, method, and computer program product for controlling data through a firewall which may be dynamically configurable. The method may comprise defining at least one node, wherein the at least one node is associated with two or more network interfaces; associating a set of firewall rules with the at least one node; receiving a packet at a first node of the at least one node; and accepting or denying the packet based on the set of firewall rules. The firewall rules include dynamic chains of rules having defined places where firewall rules may be dynamically inserted into or deleted from the firewall while the firewall is operating on one or more machines connected to network segments where the nodes reside.

Dynamically adaptive network firewalls and method, system and computer program product implementing same

Embodiments disclosed herein provide a system, method, and computer program product for obtaining secure connectivity between networked computing devices. The invention comprises utilizing a network protocol inherent to an operating system on a client device to automatically set up and establish a transient secure network connection endpoint on the client device. The act of utilizing can be a result of a server device responding to a connection request from the client device. The act of establishing the transient secure network connection endpoint on the client device creates a transient secure network connection between the server device and the transient secure network connection endpoint on the client device without manual intervention or configuration by a user at the client device. Secured access by the client device to one or more network devices is permitted until the transient secure network connection between the server device and the client device is severed.

Embodiments disclosed herein provide a system, method, and computer program product for providing network access control for a shared network. One embodiment of a network access controller may intercept a request to access a network resource from a browser application running on a client device associated with an anonymous user and determine whether the network resource is in a set of network destinations in the shared network. If the network resource is in the set of network destinations, the network access controller may direct the browser application to the network resource. If the network resource is not in the set of network destinations, the network access controller may redirect the browser application to a pre-authentication capture destination in the shared network. From the pre-authentication capture destination the anonymous user is free to visit any of the set of network destinations in the shared network without authentication.

System and method for double-capture/double-redirect to a different location

Embodiments disclosed herein provide systems and methods for provisioning network access for a user in order to provide access control to one or more networks with regard to the user. More particularly, a user may be authenticated and, based on a user profile associated with the authenticated user, provisioning rules may be established for the user such that the user's network access to one or more networks may be controlled based upon the user profile associated with the user. In a network utilized by multiple users, the use of access control based on user profiles associated with the users may prevent any one user or users from accessing one or more networks to the exclusion or detriment of other users because each user may be limited to the network resources provisioned to that user based on the user profile associated with the user.

Embodiments disclosed herein provide a system, method, and computer program product for establishing a secure network connection between two computers, a client and a server. The client may send a connection request over a public network to the server. In response, the server may generate a set of credentials, select a controller to automatically run on the client, and send the controller and the set of credentials to the client. The controller automatically executes on the client and utilizes the set of credentials from the server to establish a secure network connection with the server without user intervention. The set of credentials is valid until the secure network connection between the client and the server is severed.

Embodiments disclosed can provide a simple, singular programmatic interface for application developers to access and manipulate ASCII and non-ASCII file specifications in a cross-platform development environment regardless of operating system encoding capabilities or of the nature of the original file specification encoding. An application development environment is configured on a computer system such that a magic class file string object is instantiated when a bit string of a first encoding is received. The bit string represents a file specification of a file containing application code written by an application developer. The magic class file string object automatically determines what target operating system is being called by a function call in the application code, automatically transcodes the bit string from the first encoding into a second encoding of the target operating system, and automatically makes a correct file system API call specific to the target operating system.

Method and system for platform-independent file system interaction

A method, system and computer program product for determining the suitability of an entity to provide products or services. Category and measurement data is received concerning the entity where each category is assigned a value based on the acquisition context. If the value assigned to a category exceeds a threshold, then the measurement data for that category is used in evaluating the entity. This measurement data is weighted according to the acquisition context. A binary value is generated for each weighted measurement value that exceeds a threshold. These binary values are summed and weighted according to the confidence that the source of the data is correct. Further, the past performance and reputation of the entity is used in applying a weight to the summed binary values to generate a suitability value. If the suitability value exceeds a threshold, then it is deemed suitable to conduct business with the entity.

Determining suitability of entity to provide products or services based on factors of acquisition context

One embodiment creates a model of the traffic through a network firewall and uses that model to dynamically manipulate the network firewall. The firewall model defines nodes, connections between the nodes, and firewall rules applicable to the nodes, the connections between the nodes, or a combination thereof. Each of the nodes represents simultaneously a source and a destination for data packets. The firewall rules include dynamic chains of rules having defined places where firewall rules may be dynamically inserted into or deleted from the firewall while the firewall is operating on one or more machines connected to network segments where the nodes reside.

Storage medium having a manageable file directory structure

A method and system are disclosed for platform-independent file system interaction that can abstract the system-level idiosyncrasies associated with multi-platform, multi-language, multi-encoding file system interactions. One embodiment of the method of this invention can comprise instantiating a string object via a development environment coded calling process and setting a file name and a file path, having an easily-identifiable format, for the string object with the calling process. The string object can determine the encoding of the file name and the file path and the calling process can forward the string object and an associated file operation to an operating system level file system interface handler. The operating system level file system interface handler can call an operating system naming function to format the string object. The string object naming function can be compiled along with an encoding marker indicating the target operating system for the desired file operation. The file name and the file path can be transcoded, based on the encoding marker value, to the encoding of the target operating system. The transcoded file name and file path can be returned to the development environment (e.g., to a developer's application) by the string object naming function. The operating system level file system interface handler can then execute the file operation.

Growing community of inventors

Austin, TX, United States of America

Eric R White