Visto Corporation

Good Technology, Inc.

Roampage, Inc.

Mark D Riggins

Daniel J Mendez

Prasad Wagle

Christine C Ying

Sean Michael Quinlan

Mason Ng

David I Cowan

Joanna A Aptekar-Strober

R Stanley Bailes

Christopher R Zuleeg

Hong Q Bui

Jing Zhu

Hong O Bui

Martin Cheng, Jr

Tom Ruan

Matt Williams

Daniel I Mendez

David J Cowan

Daniel Mendez

Joannna A Aptekar-Strober

Matt O Williams

A smartphone that includes a communications interface to communicate via one or more Internet communications channels is provided. The smartphone also includes a service engine that communicates with a global server via an Internet channel using the communications interface to provide identification data to the global server. In response to providing the identification data, the service engine receives configuration data to configure the service engine with a selectable set of downloadable executables. The selectable set of downloadable executables include a selection of downloadable executables that is made at least in part by the global server using the identification data. A display presents at least some of the selectable set of downloadable executables on the smartphone, and an input device selects a downloadable executable from the selectable set. The service engine initiates a download of the selected downloadable executable using the communications interface.

System and method for globally and securely accessing unified information in a computer network

A client stores a first set of workspace data, and is coupled via a computer network to a global server. The client may be configured to synchronize portions of the first set of workspace data with the global server, which stores independently modifiable copies of the portions. The global server may also store workspace data which is not downloaded from the client, and thus stores a second set of workspace data. The global server may be configured to identify and authenticate a user seeking global server access from a remote terminal, and is configured to provide access to the first set or to the second set. Further, services may be stored anywhere in the computer network. The global server may be configured to provide the user with access to the services. The system may further include a synchronization-start module at the client site (which may be protected by a firewall) that initiates interconnection and synchronization with the global server when predetermined criteria have been satisfied.

Global server for authenticating access to remote services

A system and method distribute the task of decryption between a server and a client. To encrypt data, the client generates an encryption/decryption key. Namely, a user interface obtains a password, generally from a user. A hint generator generates a hint. A key generator generates the key based on the password and the hint. In one embodiment, the key generator hashes the password to generate a first secret, hashes the first secret to generate a second secret, hashes the first secret with the hint to generate an intermediate index, and hashes the second secret and the intermediate index to generate the key. An encryption engine can then use the key to encrypt data. The client then sends the encrypted data and possibly the hint for storage on the server. To decrypt the data, the key must be determined. Accordingly, the server knows some information and the user knows some information for decrypting the data. To generate the key, the decrypting client must first obtain rights to retrieve the hint from the server and must obtain the password from the user. Increased level of security is achieved.

System and method for encrypting and decrypting files

A global server includes a communications engine for establishing a communications link with a client; security means coupled to the communications engine for determining client privileges; a servlet host engine coupled to the security means for providing to the client, based on the client privileges, an applet which enables I/O with a secured service; and a keysafe for storing a key which enables access to the secured service. The global server may be coupled to multiple sites, wherein each site provides multiple services. Each site may be protected by a firewall. Accordingly, the global server stores the keys for enabling communication via the firewalls with the services.

System and method for enabling secure access to services in a computer network

A system transmits new workspace elements or new workspace element changes at a first memory store via an electronic network to a second memory store. The system includes a first memory store for storing workspace elements; a second memory store coupled via an electronic network to the first memory store for storing workspace element copies; an interface for receiving new workspace elements at the first memory store; and a general synchronization module for electronically transmitting copies of the new workspace elements via the electronic network to the second memory store.

System and method for transmitting workspace elements across a network

The system includes a server coupled via a computer network to a client. Upon receiving a request for access, the server sends an authentication applet to the client. The authentication applet includes a user identification (ID) module for obtaining a user ID and a password module for obtaining a client password. The authentication applet also includes a response generator coupled to the password module for using the client password as a variable in an algorithm to compute a client response. The authentication applet further includes a communications module coupled to the response generator and to the user ID module for sending the client response and the user ID back to the server for verifying the response and authenticating the user. The client uses an applet engine to execute the applet. The server uses the user ID to retrieve user information, and uses the user information as a variable in an algorithm to generate a verification response. If the verification response is the same as the client response, then the identity of the user is verified and access may be granted.

System and method for using an authentication applet to identify and authenticate a user in a computer network

A system installs and enables the use of a temporary certificate at a remote site. The system comprises a global server site, a temporary client site and a web site. The global server site includes a security module that identifies and authenticates the user at the temporary client site, and a web server engine that downloads a key generation downloadable and a certificate request engine downloadable upon user authentication to the client site. The client site includes a web engine that executes the key generation downloadable to generate a public key and a private key, and executes the certificate request engine downloadable to send the a temporary certificate request (including the public key) to the global server site. A temporary certificate generator at the global server site generates a temporary certificate having the public key and a validity period. The web server on the global server site sends the temporary certificate and a certificate installation downloadable to the web engine on the client site, which executes the downloadable thereby installing the temporary certificate. The web server on the global server site can also send a certificate maintenance downloadable and a certificate de-installation downloadable to the client site. The web server engine maintains a revocation list that contains information identifying revoked temporary certificates, so that a revoked but thusfar unexpired certificate cannot be improperly used. The web site reviews the temporary certificate for authenticity and contacts the global server site to review the revocation list and determine whether the temporary certificate has been revoked.

System and method for installing and using a temporary certificate at a remote site

A system for communicating through a computer network. The system includes a communications engine for establishing a communications link with a server, a browser, coupled to the communications engine, for receiving applet information corresponding to a service from the server, and an applet engine for using the applet information to control user interface I/O of the service. The communications engine may confirm user access privileges before establishing a communications link between the client and the server. The communications engine receives configuration data, and configures client attributes using the configuration data to provide a user-specific user interface to the client. It will be appreciated that the system may be stored on a floppy disk or hard drive.

System and method for globally accessing computer services

A system updates a remote (server) database in a network. The network comprises a global server coupled to a local client and to a remote client. The local client includes a browser for establishing a communications link with a web server on the global server. The global server has server database memory for storing independently modifiable copies of workspace data maintained by personal information managers (PIMS) or other data stores on the local client and has PIM Downloadables for interfacing with these PIMs. The local client requests synchronization capability for a particular PIM. The global server sends a PIM Downloadable corresponding to the particular PIM to the local client, which installs and initiates execution of the PIM Downloadable. Accordingly, a user interface receives information designating a database containing the workspace data to be synchronized and information selecting a synchronization mode such as one-way replace, one-way merge or two-way synchronize. A PIM interface instructs the particular PIM to retrieve the workspace data to be synchronized. A synchronization module determines update data based on the synchronization mode selected and possibly based on a comparison with the contents of the server database. A communications engine delivers the first update data to the global server, which updates the server database accordingly.

System and method for updating a remote database in a network

A system includes a general synchronization module at the client site for operating within a first firewall and for examining first version information to determine whether a first workspace element has been modified. The system further includes a synchronization agent at a global server for operating outside the first firewall and for forwarding to the general synchronization module second version information which indicates whether an independently-modifiable copy of the first workspace element has been modified. A synchronization-start module is maintained at the client site for operating within the first firewall and for securely initiating the general synchronization module and the synchronization agent when predetermined criteria have been satisfied. The system further includes means for generating a preferred version from the first workspace element and from the copy by comparing the first version information and the second version information, and means for storing the preferred version at the first store and at the second store.

System and method for securely synchronizing multiple copies of a

A system uses a global translator to automatically synchronize multiple copies of a workspace element across different formats between multiple sites in a secure network environment, independent of whether the sites are protected by site firewalls. The secure network environment includes a global server connected to multiple clients. The system includes a first store for storing a first workspace element in a first format, a second store for storing a second workspace element which is an independently modifiable copy of the first workspace element in a second format, a communications channel coupling the first store to the second store, synchronization means for synchronizing the first workspace element and the second workspace element, and a translator for translating between the first format and the second format.

Growing community of inventors

Mercer Island, WA, United States of America

Mark D Riggins