Hewlett-packard Development Company, L.P.

Robert Thomas Owen Rees

Roger Brian Gimson

Helen Balinsky

Nigel John Edwards

John William Lumley

To communicate a modular document from a first electronic device to a second electronic device, the first electronic device determines which one or more component documents of the modular document are already available at the second electronic device. The modular document is composed of plural component documents. The first electronic device sends to the second electronic device a subset of the plural component documents of the modular document, where the subset of the plural component documents is other than the one or more component documents already available at the second electronic device.

Sending a subset of component documents of a modular document to an electronic device

A first instance of a modular document is received, where the modular document is composed of plural parts, and where the modular document contains a merge definition. A second instance of the modular document is received, where the second instance and the first instance of the modular document have been modified with respect to each other. The second instance is merged with the first instance, where any conflict between the second instance and the first instance is resolved according to the merge definition.

Merging instances of a modular document

To provide for cryptographic separation, embodiments of the invention employ containment mechanisms provided by trusted operating systems to ensure that plaintext data which must be encrypted in accordance with a security policy (or, in reverse, ciphertext data which is to be decrypted) is processed by a suitable encryption routine before being sent onwards for transmission, storage, or the like. Such containment mechanisms usually include mandatory system access control rules which specify to which system resources the output of a system resource (such as an application) may be supplied. By specifying a suitable set of such rules, mandatory encryption can be enforced at the operating system kernel level.

Method and system for contained cryptographic separation

A modular document is composed of plural parts, where at least a particular one of the parts is associated with an access right policy that restricts access to the particular part. In response to a request to access the modular document, it is determined based on the access right policy whether content of the particular part is accessible in an electronic device. In response to determining that the content of the particular part is inaccessible in the electronic device, an access mechanism associated with the particular part is accessed to determine an action to take with respect to the particular part when presenting the modular document.

Providing an access mechanism associated with a document part to determine an action to take if content of the document part is inaccessible

A modular document composed of plural component documents that are combined to allow presentation of the modular document is provided. The modular document contains references to the component documents. Version information is associated with at least one of the references to identify one of plural versions of a corresponding particular one of the component documents.

Associating version information with a component document of a modular document

A method of managing multiple resource identifiers in a machine readable document includes allocating one or more resource identifiers to a context. A context name is associated to the context and the context name and resource identifier are associated in the document.

Method of managing multiple resource identifiers

A network gateway () is described, wherein an object invocation () containing an embedded object reference (), which points to a further object (), is modified on passing through the gateway. The gateway validates the object invocation and enacts a number of security tests thereon before forwarding it on. In preferred embodiments, the embedded object reference is replaced by an object reference () to a gateway proxy specifically for the further object (). The replacement object reference () also includes enough information that the original object reference () can be recovered. The gateway proxy is generated on or after receipt of the invocation (). In the event the further object (), which was the subject of the object reference, is itself invoked, the invocation is directed to the gateway proxy, which in turn recovers the original object reference and forwards the invocation on to the further object ().

Growing community of inventors

Newport, United Kingdom

Robert Thomas Owen Rees