Oracle International Corporation

Assa Abloy Ab

Actividentity, Inc.

John Jules Alexander Boyer

Eric Fernand Le Saint

Ali Kamran Ahmed

Ruchir Tewari

Timothy Michael Shephard

Vinay Prabhu

Dominique Fedronic

Hong Fei Liu

Kenneth Montagna

Tim Shephard

Dominique Louis Fedronic

A secure and transparent digital credential sharing arrangement which utilizes one or more cryptographic levels of indirection to obfuscate a sharing entity's credentials from those entities authorized to share the credentials. A security policy table is provided which allows the sharing entity to selectively authorize or revoke digital credential sharing among a plurality of entities. Various embodiments of the invention provide for secure storage and retrieval of digital credentials from security tokens such as smart cards. The secure sharing arrangement may be implemented in hierarchical or non-hierarchical embodiments as desired.

Secure digital credential sharing arrangement

A method of establishing a secure communications path between a first local server on a local network and a device on a wide area network comprising: establishing a first secure communications connection between a second local server on the local network and the device; establishing a second secure communications connection between the second local server and the first local server, wherein the second local server impersonates the device for at least a portion of the connection request; and proxying data between the local server and the device.

Methods and apparatuses for secure communication

Systems, methods and machine-readable media for providing a security service are disclosed. The methods include receiving a modification of the application object code to allow the software application to transmit a request for the security service; retrieving the modified application object code corresponding to the software application from memory; receiving, via a processor, the request for the security service from the modified application object code; and providing, via the processor, the security service. The systems and machine-readable media performing operations according to the methods disclosed.

Establishing trust between applications on a computer

A security framework for a host computer system which allows a host to control access to a compliant security token by ensuring enforcement of established security policies administered by a middleware application. Processing between the host computer system and the security token is performed using one or more modular security application agents. The modular security application agents are counterpart applications to security applications installed in the security token and may be retrieved and installed upon to ensure compatibility between counterpart token and host security applications. The security policies are a composite of host security policies and token security policies which are logically combined by the middleware application at the beginning of a session.

Uniform modular framework for a host computer system

Methods, systems and machine-readable media for providing security services

Intra-computer protected communications between applications

A system is used for authorizing access to a Personal Security Device. This system comprises a Personal Security Deviceand another devicewhich is in functional communication with said Personal Security Device. Said Personal Security Device comprises identification information retrieval data and a biometric authentication applicationwhich transfers said identification information retrieval data to said other devicein response to an identified match between biometric data sent by said other device and a predetermined biometric reference. Said other devicecomprises a security executive applicationfor retrieving an Identification Information with at least said identification information retrieval data, thus generating a retrieved Identification Information, and transferring said retrieved Identification Information to said Personal Security Device. Said Personal Security Device comprises a security executive applicationfor authorizing access in response to an identified match between said transferred retrieved Identification Information and a predetermined Identification Information stored in said Personal Security Device.

Method, system, personal security device and computer program product for cryptographically secured biometric authentication

Growing community of inventors

Ottawa, Canada

John Jules Alexander Boyer