International Business Machines Corporation

Howard Shelton Lambert

James Ronald Lewis Orchard

Barry Keith Aldred

Harry David Mitchell

Gordon W Bonsall

David Seager Renshaw

Graham Hugh Tuttle

Steven Wright

James Ronald Orchard

Julian Hamilton Jones

Howard David Mitchell

H David Mitchell

Requests for retrieval of data items from another data processing apparatus include embedded objects having executable class functions for performing operations at the target data processing apparatus. This has the advantages of the request implicitly sending data as well as requesting data and allows the request to perform a test on data within an object (such as a comparison with parameters of the request to determine whether the request may be satisfied). Objects within the request may be embedded within each other with different encryption and compression applied to the different objects. As well as achieving communication efficiencies, the ability to selectively encrypt components of a request may be used to provide greater security. For example, a store may be able to interpret the request, while credit details may be separately encrypted such that only a bank may decrypt that subcomponent of the request.

Data transfer across a network

Provided are methods, computer programs and apparatus for communication in a distributed object-oriented data processing environment. Requests for retrieval of data items from another data processing apparatus include embedded objects having executable class functions for performing operations at the target data processing apparatus. This has the advantages of the request implicitly sending data as well as requesting data and allows the request to perform a test on data within an object. Objects within the request can be embedded within each other with different encryption and compression applied to the different objects. As well as achieving communication efficiencies, the ability to selectively encrypt components of a request can be used to provide greater security. For example a store may be able to interpret the request, but credit details may be separately encrypted such that only a bank can decrypt that subcomponent of the request.

Method and apparatus for data transfer across a network

A method for encryption and decryption of data items is provided by defining a cipher key based on variables in a Chaotic Equation. The method includes selecting a Chaotic Equation from a set of Chaotic Equations, defining starting conditions of the variables of the equation, and applying the equation to each data item. The real and imaginary parts of the result of the iteration of the Chaotic Equation are combined with the data item by an arithmetic operation, for example, an XOR operation. Data items in a continuous stream with a rate dependency can be encrypted and decrypted on an item by item basis. The input or cipher key changes for each byte of the data encryption. Blocks of data can be encrypted using the method with an identifier of the order of the blocks in the data stream. If blocks are received out of sequence, the identifiers can be used to maintain the correct decryption order. The method of encryption and decryption can be used in devices to avoid the need for a session key. The continuously updating input or cipher key enables fraudulent use of devices to be identified.

Method for encryption of data based on an iteration of a stored encryption key

A method and apparatus for encryption of data are provided, in which the data is made up of a series of data items (). The data items () maybe bytes of data or blocks of data. The method includes providing a plurality of encryption algorithms (), selecting when to change encryption algorithm (), selecting which encryption algorithm to change to (), wherein each selection is carried out by applying a Chaotic and/or Catastrophic equation. The plurality of encryption algorithms () have index numbers and the generation of an index number by applying the Chaotic or Catastrophic equation selects an encryption algorithm. The selection of when to change encryption algorithm may be determined by a Catastrophic event in the Catastrophic equation and the selection of encryption algorithm may be determined by the surface of a Catastrophic curve on which a point lies, wherein each surface corresponds to an encryption algorithm. The selection of when to change encryption algorithm may be carried out by generating a data item count by applying a Chaotic equation and the encryption algorithm may be selected by generating its index number by applying a Chaotic equation.

Method and apparatus for encryption of data

A method for administration in an object-oriented data processing environment is provided, for use in a distributed messaging system comprising a local computer system, a remote computer system having a remote queue object to be administered and a network. A query object is sent to the remote queue object in order to obtain a first copy of the remote queue object. Once the first copy is received, a second copy of the remote queue object is made at the local computer system and an administrator uses this second copy to make one or more updates. The updates and the first copy are then sent to the remote queue object. The remote queue object in its current state is compared to the first copy, in order to determine whether they match. If a match occurs, the administrator's updates are processed and the remote queue object is replaced with the updated version.

Administration of a system

A method for encryption and decryption of data items is provided by defining a cipher key based on variables in a Chaotic Equation. The method includes selecting a Chaotic Equation () from a set of Chaotic Equations, defining starting conditions of the variables of the equation (), and applying the equation to each data item (). The real and imaginary parts of the result of the iteration of the Chaotic Equation are combined with the data item by an arithmetic operation, for example, an XOR operation (). Data items in a continuous stream with a rate dependency can be encrypted and decrypted on an item by item basis. The input or cipher key changes for each byte of the data encryption. Blocks of data () can be encrypted using the method with an identifier of the order of the blocks in the data stream. If blocks are received out of sequence, the identifiers can be used to maintain the correct decryption order. The method of encryption and decryption can be used in devices () to avoid the need for a session key. The continuously updating input or cipher key enables fraudulent use of devices () to be identified.

A camera system including a plurality of image capture devices and supporting output of data from data storage arrays of each image capture device in a segment-by-segment manner, with output lines arranged in an interleaved manner so that interleaving is automatically achieved without complex image processing. The interleaved image or video output of such a camera system will appear as a three dimensional image when viewed through a screen of lenticular lenses.

Camera system for three dimensional images and video

A data conferencing system includes at least two computer workstations linked by a data network. Each computer workstation is able to store and display an electronic sheet, the electronic sheet being logically divided into a set of cells, each cell being able to contain a single character. A user can select a portion of the electronic sheet, a portion comprising at least one cell, and then perform different editing operations on the selected portion of the electronic sheet. Updates resulting from editing the electronic sheet are then distributed to the other computer workstations in the data conferencing system, so that all the workstations in the data conferencing system share the same electronic sheet.

Data conferencing system with distributed electronic sheet

A distributed data processing system such as a retail store customer transaction network using smart cards provides an object oriented processing environment at each transaction terminal to enable smart cards of different types to be handled by loading card handling objects appropriate to cards presented and the reader to which they are presented.

Data processing system using active tokens and method for controlling such a system

Provided are a method and a mechanism for dynamically controlling the performance of communication-related operations of a mobile device in accordance with legislative requirements of the particular location of the mobile device and the location of the computing device with which it is to communicate, and also in accordance with communication requirements of application programs at either end of the communication link. A first use of the invention is for ensuring conformance of a mobile device's communications to the cryptographic requirements of different countries, even when the device crosses a country boundary during communication.

Enabling conformance to legislative requirements for mobile devices

In a distributed data processing system each component is provided with an object orientated platform together with instantiations of a generic network object for each application involving data transmission, enabling it to run a multiplexing/demultiplexing object appropriate to each application being processed. This effectively provides multiple concurrent data &ldquo;pipes&rdquo; over a single physical/logical connection.

Distributed data processing system method for controlling such a system

The security and integrity of card initiated transactions are improved by encrypting processes involved in such transactions and controlling access to the processes by developing decryption keys partially from data derived from a card presented by an intending user and partially from personal data supplied by the user. In an embodiment a hierarchy of security levels provides for users of different authority to access selected processes.

Method for controlling access to electronically provided services and system for implementing such method

A session processing module for a server is adapted to communicate across the Internet with a plurality of clients. The processing module runs within a servlet and allocates a session identifier in response to a first input stream of a session between a client and the server; negotiates communication characteristics for the session; and instantiates, according to the communication characteristics, routines for processing subsequent session input streams containing request data and routines for generating session output streams containing response data. A variable depth of penetration to be applied to a dynamically specified quality of service for a session is enabled. Thus, in one embodiment the module relays encrypted request data for a session to a back-end server, and receives from the back-end server encrypted response data for the session for the client. Alternatively, the module itself decrypts input streams containing request data and processes the data to generate output streams containing encrypted response data for the client.

Growing community of inventors

Southampton, United Kingdom

Howard Shelton Lambert