Bladelogic, Inc.

Oracle International Corporation

Digital Equipment Corporation

Paul A Reilly

Chet Birger

Denis Knjazihhin

David Allen Solin

Carl Adams

Nipun Agarwal

Ravi Murthy

Namit Jain

Neal F Jacobson

Michael J Renzullo

James Stenoish

Ellen Batbouta

A key manager provides a way to separate out the management of encryption keys and policies from application domains. The key manager may create cipher objects that may be used by the domains to perform encryption or decryption, without exposing the keys or encryption/decryption algorithms to the domains. A master key managed by the key manager may be used to encrypt and decrypt the domain keys that are stored under the control of the key manager. The key manager supports the rekeying of both the master key and the domain keys based on policy. Multiple versions of domain keys may be supported, allowing domains to access data encrypted with a previous version of a domain key after a rekeying.

Multi-level key management

Systems and methods for stateless system management are described. Examples include a method wherein a user sends the management system a request to act upon a managed system. The management system determines whether the user is authorized for the requested action. Upon authorization, the management system looks up an automation principal, which is a security principal native to the managed system. The management system retrieves connecting credentials for the automation principal, and connects to the managed system using the retrieved credentials. Once the managed system is connected, the management system performs the requested action on the managed system, and sends the result back to the user.

Security context passing for stateless system management

Techniques and systems are disclosed for storing instances of an opaque type in a database according to a direct path loading approach. According to one aspect, an opaque type implementor registers, with a loader application, routines that the opaque type implementor implements. In response, the loader application associates the opaque type with the routines. The loader application reads data that comprises instances of the opaque type. The loader application determines which routines are associated with the opaque type. The loader application invokes the routines, which create an array for storing instances of the opaque type and populate the array with values specified in the data. The loader application converts the array into a data stream that conforms to the format of the database's data blocks. The loader application then streams the data to a database server, which writes the data directly into data blocks in the database.

Direct loading of opaque types

In distributed heterogeneous data processing networks, dispatcher and control server software components execute the code of a single application or of many portions of the code of one or more applications in response to a method object received from a client application. The method object includes a reference to the code to be executed.

Methods and apparatus for implementing server functions in a distributed

Growing community of inventors

Nashua, NH, United States of America

Paul A Reilly