Hewlett-packard Development Company, L.p.

International Business Machines Corporation

Kan Zhang

Xiao Li

Hong Min

Serge Bourbonnais

Jean Tourrilhes

Gong Su

Jonathan W Wierenga

Yat On Lau

Austin F M D'Costa

Christian Zentgraf

Timothy P J G Kindberg

Seunghyun Im

Salil Pradhan

Marcos Kawazoe Aguilera

Mark David Lillibridge

James Allely Rowson

Minwen Ji

Robert Nelson Mayo

Jeffrey Alan Morgan

Timothy Paul James Gerard Kindberg

Denis Bohm

Michael George Lamming

Timothy Paul James G Kindberg

Christoph Gouguenheim

Transaction consistency query support is available for replicated data from recovery log to external data stores. An external data store is populated with records using entries of a change data table. The change data table has entries for each transaction that has committed and is to be replicated, and each of the entries stores information for each log entry in a recovery log from a database management system. Each log entry identifies a transactional change of data and a transaction completion indicator of one of commit and abort. In response to receiving a query about a transaction of the transactions, a set of records are retrieved from the external data store for the transaction. From the set of records, records whose sequence identifier values are larger than a maximum transaction commit sequence identifier are removed. From the set of records, remaining records having transaction consistency are returned.

Transaction consistency query support for replicated data from recovery log to external data stores

A secure token includes a processor for protecting a first cryptographic key against unauthorized access, and creating a second cryptographic key from the first key and a message unique to an insecure device. The second key is usable for file decryption by the insecure device.

Trusted system for file distribution

In a first aspect, the present invention provides a protocol for communications across a securable communication channel between a first device and a second device. The protocol includes the transmission of a plurality of uniquely identifiable messages which each include security-related data, from the first device to the second device. The protocol includes determining whether a subset of messages that are received by the second device comply with at least one predetermined message criterion and are identifiable as having been sent from the first device. In the event that said subset of messages are determined to comply with the predetermined verification criterion (or criteria) and are identifiable as having been sent from the first device, the security-related data is determined to have been successfully communicated to the second device.

Secure spontaneous associations between networkable devices

In a first aspect the present invention provides a method for verifying that a secure association has been formed between a first device and a second device. The method includes, enabling a user of the first device to select a verification indicator, and encrypting the verification indicator using an encryption key of the first device to form cipher text. The cipher text is then communication to the second device using a multi-part communication protocol, and decrypted using an encryption key of the second device to obtain a received verification indicator. The method includes verifying the association is secure if the received verification indicator is the same as the selected verification indicator.

Method for verifying a secure association between devices

Methods and systems for generating time-based identifiers that are used for identifying items is described. In one embodiment, a master key is assigned to an electronic tag. Time-based other keys are generated based on the master key. Time-based identifiers are generated based on the time-based other keys. The time-based identifiers are useful only for a period of time to a holder of the time-based other keys.

Method and system for generating time-based identifiers

An aspect of the present invention is a digital media-playing device. The digital media-playing device includes a controller and a compensation-enabled component for playing digital media coupled to the controller wherein the compensation-enabled component is non-bypassable.

Digital media-playing device and a method of playing digital media therein

A method, and associated apparatus, comprises calculating a first part of a message authentication function by a first processor, calculating a second part of the message authentication function by a second processor, and combining the first and second parts into the message authentication function by the first or second processor. The message authentication function can be used to authenticate data transmitted between the first processor and a third processor.

Electronic message authentication

The present invention provides for validating an association between computing devices using a succession of human-perceptible stimuli such as sounds, lights colors or shapes. Commands are sent from the initiating device to the responding device in encrypted messages. Human-perceptible stimuli are formed at the responding device in response to at least some of the commands. The responder searches for messages that the responder is unable to decrypt and that are received in a time interval before messages that the responder is able to decrypt. The succession of human-perceptible stimuli may be harmonized, in which case, an association between the initiating device and the responding device is validated when the human-perceptible stimuli formed by the initiating device and the human-perceptible stimuli formed by the responding device are harmonized together.

Validation for secure device associations

A system of securing communications, comprising a plurality of computer peripheral resources, a beacon in signal communication with and located proximate each computer peripheral resource and configured to communicate using RF signals and ultrasound signals, and a portable device configured to request a listing of the computer peripheral resources using wireless network communication and to guide a user to a selected one of the computer peripheral resources using the RF and the ultrasound signals by way of the corresponding beacon, the portable device and the selected computer peripheral resource being configured to exchange encryption keys validated using signals from the beacon and to communicate with each other using encrypted network communication. Also provided is a communication system, comprising first and second portable devices respectively configured to use RF signals and ultrasound signals and to exchange encryption keys and to communicate with each other using encrypted network communication.

Growing community of inventors

Palo Alto, CA, United States of America

Kan Zhang