Liquid Machines, Inc.

Opendesign, Inc.

Fajen Kyne

Edward K Y Jung

Sanjeev Katariya

Steve G Bush

Thomas Charles Butcher

Edward J Gaudet

James Schoonmaker

Robert Ian Morgan

Michael D Smith

Christopher B Barclay

Rob Bearman

Sami Khoury

Omri Traub

Norbert Leser

Arnold S Epstein

A method and system for mapping logical identifiers to physical identifiers is provided. In one embodiment, a logical routing system allows each application, or more generally entity (e.g., user of an application), to register its logical identifier to physical identifier mapping when the application starts executing on a computer. To send a message to an application identified by a logical identifier, a client program uses the registered mapping to identify the physical identifier of the computer. If an application later starts executing on a different computer, then the application can register a different mapping.

Application platform

Computer system and method enforces control policies including access and usage policies. A rules-based engine member or assembly is coupled between a rights-management (or similar) system and one or more target applications. The rules-based engine member centralizes data security determinations for the target applications. One or more agents are responsive to the rules-based engine member and target applications, and handle low-level details in interactions between the rules-based engine member and target applications. A generic engine framework serves as a normalizing factor and enables scalability.

Method and system for using a rules engine for enforcing access and usage policies in rights-aware applications

In a network of intermittently-connected computers, a method and apparatus for maintaining and managing control over data objects authored, accessed, and altered by users in dynamic, distributed, and collaborative contexts. The invention method and apparatus attach to each data object an identification of a respective control policy. Each control policy comprises at least an indication of a subset of the users who may access the data object, an indication of the privileges granted to each subset of users able to access the data object, and an indication of a subset of users who may define or edit the control policy. The invention method and apparatus separate the management of the control policies of data objects from the creation and use of the data objects. The invention method and apparatus automate common policy changes, distribution of policy changes to the enforcement agents, and propagation of control policies to derivative works.

Computer method and apparatus for managing data objects in a distributed context

Growing community of inventors

Littleton, MA, United States of America

Fajen Kyne