International Business Machines Corporation

Gordon Kent Arnold

Robert Walter Schreiber

Bruce Arland Rich

David Gerard Kuehr-McLaren

John Thomas Peck

Robert S Miles

Thomas Harry Benjamin

An application that consumes key management information (e.g., keys and certificates) through a conventional keystore API is configured to recognize a new keystore type. In addition, the services of that API are pointed to a management server component associated with a key management protocol (e.g., KMIP), and a client component of the key management protocol is instantiated as a 'semi-remote' keystore in association with the application. Once configured to use the new keystore type, the consuming application uses the keystore API in a conventional manner, but calls to the new keystore type are directed to the KMIP client. The client intercepts these calls and then interacts with the KMIP server on behalf of the consuming application, and without the application being aware of the interaction over the KMIP client-server API. This approach enables the consuming application to take advantage of the full benefits provided by the key management protocol transparently.

Using key material protocol services transparently

A key management protocol (such as KMIP) is extended to provide an extended credential type to pass information from clients to the server to enable the server to deduce pre-provisioned cryptographic materials for the individual clients. Preferably, KMIP client code communicates device information to a key management server in a value in the headers of KMIP requests that flow to the server. In this manner, KMIP requests are associated with pre-provisioned cryptographic materials for particular devices or device groups.

Extending credential type to group Key Management Interoperability Protocol (KMIP) clients

Parties involved in a transaction in an E-marketplace identify characteristics of a transaction that they are willing to accept and/or that they can provide. To do this, an attribute certificate is created for each party that contains the attributes of a buyer, seller, or third-party participant who will be transacting business in the particular E-marketplace. The attributes pertain to specifics of the transaction. The party submitting the attribute also identifies alternative conditions which, if they exist would be acceptable for conducting the transaction. Once these criteria, in the form of the attribute certificates, are received by the E-marketplace, the E-marketplace verifies the attributes. A server in the E-marketplace is configured to determine various combinations of participants that can match the deal criteria. In this manner, the E-marketplace 'choreographs' the transaction to meet the needs of all.

Method, system and computer program product for selective data disclosure and contract negotiation in an E-marketplace based on predetermined preferences

Parties involved in a particular transaction in an E-marketplace each identify and submit to the E-marketplace relevant characteristics related to that transaction. The identification of the party is not revealed with this submission. To achieve this, an attribute certificate is created which contains attributes related to a buyer or seller's potential participation in a transaction. The attributes that are selected pertain to specifics of the transaction and not to the certificate holder. Each of the attributes are verified by a trusted authority (e.g., the E-marketplace acting as an intermediary for the transaction) so that when the attribute certificate is supplied to a party, the party is assured that the information it contains is accurate. In this manner, parties to a negotiation in a particular transaction are able to know immediately and with a high level of assurance that certain critical elements to the proposed transaction are met (or are capable of being met). This information is made available to all who wish to participate in the bidding/negotiating process (as opposed to being available only when specifically authorized by the certificate owner) but without the need to identify the certificate owner.

Method, system and computer program product for protection of identity information in electronic transactions using attribute certificates

A system and method for providing a password to a user using voice recognition technology. The user's voice signature is captured and stored in order to identify the user. When the user forgets or otherwise loses a password needed to log into a computer system, he telephones a password reset system. An identifier corresponding to the user is provided by the user by using the telephone keypad or voice commands. One or more random words are requested by the password reset system. The user responds by repeating the words into the telephone receiver. The received words are matched against the user's stored voice signature to authenticate the user. If the user is authenticated, one or more desired passwords are provided to the user using a number of delivery mechanisms. If the user is not authenticated, the intrusion is logged to further maintain system security.

System and method for voice recognition password reset

An email proxy server system gives the user access to all of their email accounts through a unified port. The proxy server maintains a mail registration database associating the user's ID with multiple email accounts, which may be hosted on different Internet providers and otherwise. The email messages stored on the email hosts may be in POP3 format, which configuration the proxy server imitates to give the user an impression of transparent access to all of their email accounts. Because the ability to access individual mail boxes is unbound from particular internet addresses, one user may maintain any number of email mail boxes at different hosting servers, and change those addresses, without having to reprogram client, server, and other software. Moreover, the presentation of the integrated interface of the invention permits system administrators to attach service modules, such as billing and other packages directly to the proxy server to serve each of the different email accounts, without having to tailor those individual services to individual hosts hardware.

System and method for integrated management of electronic messages

An apparatus and method for automated referencing of electronic information is disclosed. The apparatus for automated referencing of electronic information comprises means for receiving a message, the message having at least one attachment; means for applying detachment rules to the message, the detachment rules including criteria for detachment; and means for sending the message to at least one recipient. The method for automated referencing of electronic information comprises the steps of: (1) receiving a message, the message having at least one attachment; (2) applying detachment rules to the message, the detachment rules including criteria for detachment; (3) sending the message to at least one recipient; and if the detachment rules determine that the attachment should be attached, (4) detaching the attachment; (5) placing the attachment on a remote site; and (6) inserting a pointer into the message, wherein the pointer is linked to the remote site.

Method and apparatus for automated referencing of electronic information

A system and method for distribution and storage of electronic mail information is disclosed. The system comprises: a server; a status rendezvous procedure (102) residing on the server; and a distribution storage facility comprising a distribution management system (112) residing on the server; and a container management system (114) residing on the server. The method for distribution and storage of electronic mail information comprises the following steps: (1) receiving inbound information from a first remote connection, the inbound information comprising a distribution; (2) processing the distribution, the processing resulting in the distribution being stored in memory; (3) writing the distribution to a storage medium; (4) paging the distribution from the storage medium into memory; (5) passing a part of the distribution in memory to at least a second remote connection; and (6) determining an intended recipient in response to the presence of a reported recipient.

System for the distribution and storage of electronic mail information

A system and method for processing electronic mail status rendezvous. A system for processing electronic mail status rendezvous includes an object for receiving a status message having incomplete reported recipient information; an object for initiating a candidate list of a plurality of candidates, the candidates being selected according to an identification in the status message; an object for preparing a search list of object identifiers; an object for eliminating non-matching candidates; and an object for selecting a matching candidate. A method for processing electronic mail status rendezvous includes the steps of receiving a status message having incomplete reported recipient information; preparing a candidate list of a plurality of candidates; the candidates selected according to an identification in the status message, preparing a search list of object identifiers; eliminating non-matching candidates; and selecting a matching candidate.

Growing community of inventors

Cary, NC, United States of America

Gordon Kent Arnold