Hewlett-packard Development Company, L.P.

Hewlett Packard Enterprise Development LP

Ent. Services Development Corporation LP

Helen Balinsky

Steven J Simske

Liqun Chen

Nassir Mohammad

Keith Alexander Harrison

David Subiros Perez

Scott A White

James Thomas Edward McDonnell

Vali Ali

Weng Wah Loh

Robert Thomas Owen Rees

Thomas Rathbone

John Deryk Waters

Kas Kasravi

Fraser John Dickin

Andrew M Spencer

Shivaun Albright

Anthony J Wiley

James C Cooper

Roger Brian Gimson

Robert B Taylor

Neil Moore

Valiuddin Y Ali

Chris I Dalton

Maurizio Pilu

Adrian John Baldwin

Joshua Serratelli Schiffman

Marie Vans

Jonathan Griffin

Eytan Cohen

Scott White

Brian C Atkins

Steven Battle

Lorri L Jefferson

Stefek Malkowski Zaba

Edward McDonnell

Mark Ripenbein

Alexander Balinsky

Hector Rodriguez Aviles

Moshe Uzan

Alberto Such Vicente

Matthew Roberts

Michelle Holmes

Tanguy Delume

Lorri J Jefferson

Al-Fathiatul Habibah Abdul-Rahman

A method tor regulating production of an object, the method comprising allocating access rights and a production quota to a user, the production quota to be fulfilled on an authorised production device using an encrypted unique job token embedded or comprised within or derived from the object and associated with the user and production device, receiving a user request to produce the object at the authorised production device, authenticating the user, decrypting the encrypted unique job token using a private key of the user and a private key of the production device, determining whether the production quota for the user related to the object has been met and on the basis of the determination, authorising the user request to produce the object at the authorised production device.

Production device for production of an object for user permitted to print pre-defined number of copies of the object including encrypted token, and decrypted by the production device for determining user access right

In an example, a data structure comprises a first genesis record having an associated authentication value and a plurality of subsequent records arranged in an order, wherein at least one subsequent record includes the authentication value associated with the first genesis record and an authentication value associated with another record in the data structure. A method may include designating one of the subsequent records as a second genesis record, acquiring an authentication value for the second genesis record, deleting at least one record preceding the second genesis record in the data structure and adding a further record to the data structure wherein the further record includes the authentication value of the second genesis record and an authentication value associated with a directly preceding record in the data structure.

Data structures

Examples associated with digital composition hashing are described. One example method includes receiving a digital composition file from a user. The digital composition file may include a top-level design and a hierarchy of sub-level designs. A hashed structure may be generated from the digital composition file, where a node in the hashed structure for the first sub-level design is generated based on hashes of sub-level designs below the first sub-level design in the hierarchy. The hashed structure and a hash of the digital composition file are stored in association with the user.

Digital composition hashing

A method for regulating modification of a distributed digital ledger at a node comprises controlling access to a cryptographic key used to enable modification of the distributed digital ledger according to a policy maintained by at least one owner of the distributed digital ledger.

Regulating modification

A method for regulating document access, the method comprising providing a set of access keys for a user, respective ones of the keys providing different user access privileges for components of a composite document, selecting multiple nodes in a distributed storage system, distributing data representing N fragments of encrypted or unencrypted versions of the set of access keys and/or at least one of the individual keys and/or a symmetric key. K, associated with the user across N selected nodes of the distributed storage system, wherein the encrypted versions are encrypted using the symmetric encryption key. K, associated with the user, encrypting data relating to address information of the N selected nodes using a public encryption key of the user to generate a location object and storing the location object as a component of the composite document.

Regulating document access

In an example, a method includes acquiring, at a processor, first object model data representing a first three-dimensional object. A portion of the first object model data representing an object region to be concealed may be identified using the processor. The first object model data may be transformed, using the processor, to determine second object model data representing a modified first three-dimensional object which is distended in the object region represented by the identified portion of the first object model data.

Transforming object model data

In an example, a method includes acquiring, at a processor, object generation source data representing a three-dimensional object to be generated in additive manufacturing. A dataset which is representative of an aspect of the three-dimensional object may be determined from the object generation source data. Digital security may be applied to the object generation source data and the dataset. The digital security applied to the object generation source data may be different from that which is applied to the dataset.

Datasets representing aspects of 3D object

Examples disclosed herein relate to receiving a request to perform an operation on a document, determining whether the document complies with a plurality of operation policies, and in response to determining that the document complies with the plurality of operation policies, providing a notification that the operation is ready to be performed and digitally signing the document.

Document operation compliance

Example implementations relate to assigning a document to partial membership in communities. In example implementations, a detected feature of a document may be compared with a training pattern. Based on the comparison, the document may be assigned partial membership in a first community and partial membership in a second community.

Assigning a document to partial membership in communities

According to one example, a method is described for accessing a composite document in which a trigger is received. A handling instruction for a content-part, from a composite document, and a status for the content-part, from a second computer, are retrieved. An action for the content-part is determined based on the handling instruction and the status, and the content-part action is executed. In the event that the content-part action is to revoke the content-part, the content-part is revoked. In the event that the content-part action is to synchronize the content-part, the content-part is synchronized.

Composite document access

A callback, which may be assigned to a creation event of an application process, may be executed. In response to the execution of the callback, a data flow control object may be injected into the application process. The data flow control object may be to intercept a system call made by the application process and to control flow of data handled by the system call.

Injection of data flow control objects into application processes

According to an example of accessing a composite document, a request to access a composite document is received. A key associated with a group is fetched, and the key is used to decrypt a part of the composite document comprising an attribute. In the event that the attribute is verified, access to the composite document is provided.

According to an example, a performance of a predetermined action with regard to a data may be prevented. In the method, a first system call pertaining to the data may be intercepted and suspended. A determination may be made as to whether a second system call that is to be executed following execution of the first system call will result in performance of a predetermined action with regard to the data. In addition, an operation may be implemented on the first system call to prevent the performance of the predetermined action with regard to the data.

Prevention of a predetermined action regarding data

According to one example, a first computer system receives at least one request by at least one workflow participant to access a composite document content-part from a second computer system. The first computer system retrieves at least one encrypted bundle from the composite document for the at least one workflow participant, decrypts the encrypted bundle using a private key, and ascertains whether at least one rule retrieved from the decrypted bundle is satisfied. In the event that at least one rule is satisfied, the first computer system releases a token from the decrypted bundle to the second computer system to access the composite document content-part.

Examples disclosed herein relate to request authorization and authentication. Examples include to intercept a request from a processing pipeline of a device. The device to determine whether the request is authorized and authentic. The device to generate a cancellation request if the request is not authorized or not authenticated. The device to provide the cancellation request to the processing pipeline of the device.

Cancellation requests

Growing community of inventors

Bristol, United Kingdom

Helen Balinsky