Ca, Inc.

Computer Associates Think, Inc.

Kl Data Security Pty Ltd

Lock Box Pty Ltd

Richard Hans Harvey

Ronald William Ramsay

Justin J McDonald

Damon N Groenveld

David Geoffrey Hook

Peter Kai Dettman

Benjamin Michael Gardiner

Timothy Bentley

Ronald W Ramsay

The present invention relates to the field of sharing encrypted content. In one form, the invention relates to multiple user access and management of encrypted content. In one particular aspect, the present invention is suitable for use in community controlled encryption of shared content using indirect keys. The present invention relates to the use of encrypted intermediate key(s), such as an encrypted community key and/or workspace key. A changeable group of users is associated with a community key. Changeable set of content is associated with a workspace key. The present invention also uses permits in association with encrypted keys.

Method and system for sharing encrypted content

This disclosure relates in general to the field of directory information systems and/or services. In a method embodiment, a method of arranging objects in a directory information system includes providing a plurality of objects to a computer-readable medium having a directory information structure. Each object may have one or more characteristics and each object may be stored, for example, in the computer-readable medium according to the directory information structure. Storing the objects may further include performing a mathematic operation on at least one of the characteristic(s) of the object, and arranging the object in the directory information structure based at least in part on a result of the mathematical operation performed on at least one of the characteristic(s) of the object.

Directory partitioned system and method

A system and method are provided for processing directory service operations. The system includes a client device communicatively coupled to one or more directory servers. Each directory server includes a communications interface, a storage mechanism, and an evaluation module. According to an exemplary embodiment, the storage mechanism is a non-persistent storage mechanism which increases read and write performance. When a directory server receives a directory service operation, it determines whether it is capable of processing the operation, and if so, processes it with respect to its non-persistent storage mechanism.

System and method for efficient directory performance using non-persistent storage

A method for loading data into an alternate evaluator for evaluating directory service operations includes loading data into a list of entries. Loading data into a list of normalized values and associated pointers. Loading data into a list of indexes and associated pointers.

Method and apparatus for loading data into an alternate evaluator for directory operations

A method for optimizing directory performance includes receiving a directory service operation. Attempting to respond to the operation using an alternate evaluator. Responding to the operation using a back-end evaluator when the alternate evaluator is not able to respond to the operation.

Method and apparatus for optimizing directory performance

A method of executing an operation in a directory information system, includes performing a first operation within a directory information system in accordance with a predetermined procedure, where the first operation comprising a search for one or more of a plurality of directory objects. The plurality of directory objects are stored in a computer-readable medium that has a directory information structure. In one particular embodiment, the search generates one or more first results. The method also includes performing a second operation within the directory information system in accordance with the predetermined procedure. The second operation uses at least a portion of the one or more first results generated by the search for the one or more of the plurality of objects. In this embodiment, the second operation generates one more second results. The method further includes returning the one or more second results based at least in part on the second operation.

Directory system and method of searching information

The present invention relates to the field of security of electronic data and/or communications. In one form, the invention relates to data security and/or privacy in a distributed and/or decentralised network environment. In another form, the invention relates to enabling private collaboration and/or information sharing between users, agents and/or applications. Embodiment(s) of the present invention enable the sharing of key(s) and/or content between a first user and/or agent and a second user and/or agent. Furthermore, embodiment(s) of the present invention have application in sharing encrypted information via information sharing services. A number of inventions, aspects and embodiments are disclosed herein.

Cryptographic method and system

A system and method are provided for efficiently evaluating directory service operations in a directory service network. The directory service network may comprise a plurality of directory servers. Each of the directory servers may maintain information about the other servers in the network. The directory servers may share information received in a directory service update using a mutual updating process. Additionally, a new directory server joining a directory service network may be initialized with the directory data stored at one or more of the other network servers.

System and method for providing a directory service network

A system for responding to directory service operations includes a receiving data path for receiving operations. An alternate evaluator includes a local data store, the alternate evaluator responding to the received operations. A responding data path for sending the responses to the operations from the alternate evaluator.

Structure of an alternative evaluator for directory operations

A method of determining whether a query can be redirected to an alternate evaluator in a directory system. The method includes the step of determining in any order, any one or a combination of: Availability of an alternate evaluator, First parameters of the query, Second parameters of the alternate evaluator, Third parameters which are pre-determined criteria.

Method for selecting a processor for query execution

A system and method are provided for routing directory service operations in a directory service network. A router may be included in a directory service network. The router may include a server knowledge list that maintains information about one or more directory servers in the directory service network. Directory service operations may be received by the router and may be routed to an appropriate directory server based on availability one or more of the directory servers.

System and method for routing directory service operations in a directory service network

According to one embodiment, a method for providing an enhanced directory service includes providing a supplemental layer between a user and a reference layer, the supplemental layer providing the user with any directory functionality provided by the reference layer as well as additional directory functionality.

Method and system for providing a directory overlay

According to one embodiment, a method of processing an update operation in a directory system having a reference layer having directory functionality and a supplemental layer operative intermediate the reference layer and a user is provided. The supplemental layer comprises a non-persistent store. The method includes receiving the update operation the update operation having an associated attribute and determining whether the attribute associated with the update operation is stored in the non-persistent store.

Method and system for improving write performance in a supplemental directory

According to one embodiment of the invention a method of updating schema in a directory system having a reference layer adapted to provide directory functionality and an intermediate layer adapted to provide supplemental directory functionality is provided. The intermediate layer is provided between the reference layer and the client is provided. The method includes determining that a new attribute type is not defined in a schema associated with the system, and in response, registering the new attribute type in the schema.

Method and system for configuring a supplemental directory

A method for enhancing directory service performance includes determining one or more data types to be loaded. Retrieving data objects that includes the determined data types from storage. Preloading object name and determined data type data into a directory service alternate evaluator for each data object retrieved from storage.

Growing community of inventors

Ringwood East, Australia

Richard Hans Harvey