Red Hat, Inc.

Steven William Parkinson

Nang Kon Kwan

Robert B Lord

Peter Andrew Rowley

Christina Fu

Nathan G Kinder

Robert J Relyea

Chandrasekar Kannan

Shuk Yee Ho

Robert B Crittenden

Embodiments of the present invention relate to a device includes both a transferring and receiving interface. The device may include a direction indicator, for example an arrow, indicating a direction of data transfer. The device may also include a switch, such as a button, to initiate data transfer. The device may also include a counter, display, or light that indicates the amount data transferred and serves as a user interface. The device may also include a power source, such as a battery, to power the device during data transfer.

Portable storage device capable of transferring data to a portable storage device

A software execution profiling method comprising: collecting, from a plurality of subsystems of a client machine, information including an event report corresponding to each of a plurality of events occurring in the plurality of subsystems, each event report specifying an event identifier and a cause identifier; responsive to determining that the cause identifier includes an empty field, determining time values in the information associated with the first event and a second which caused the first event; determining to indicate a causation relationship between the first event and the second event in view of the time value of the second event being within the defined period of the time value of the first event; and presenting via a graphical user interface (GUI) the events and an indicator of the causation relationship.

Non-invasive time-based profiling tool

A method and apparatus for providing safety feedback to web browsers. A web browser contacts a remote server that monitors web site safety and provides a universal resource locator (URL) for a web site the client is about to access. The web site safety or tracking server checks its database for reports of issues related to the URL and provides information on any such issues. The user of the web browser can then make an informed decision about whether to continue the access of the website associated with the URL. The user of the web browser can also send reports of unwanted activities by any website. This information is analyzed and added to the database maintained by the remote server.

Browser initiated reporting of fraud

A method includes detecting a security token device that is un-formatted with respect to an enterprise, wherein the security token device comprises a first cryptographic authentication key, and formatting, by a processor, the security token device by replacing the first cryptographic authentication key of the security token device with a second cryptographic authentication key that is specific to a security requirement of the enterprise.

Smartcard formation with authentication

A method and apparatus for an identity card having improved security features. The identity card can have a two-dimensional bar code or similar encoding of data allowing for verification of the authenticity of the identity card. The two-dimensional bar code can store security data such as codes or image data that can be decoded and cross-checked against the visible user data to ensure that the card has not been improperly modified.

Two-dimensional bar code for ID card

A subject private key that has been encrypted with a session key and a subject public key are received. A storage session key is generated and the subject private key is encrypted with the storage session key. A storage key is retrieved and the storage session key is encrypted with the storage key. The subject private key encrypted with the storage session key and the encrypted storage session key are stored in a memory.

Server-side key generation

An embodiment generally relates to a method of managing tokens. The method includes detecting a presence of a token at a client and determining a status of the token. The method also includes formatting the token at the client in response to the status of the token being unformatted.

Smartcard formation with authentication keys

An embodiment generally relates to a method of preventing information theft. The method includes receiving access information including a password, comparing the access information to stored access information, and verifying a destination of the access information to determine if the destination is valid for the access information. The access information is transmitted based on the comparison to the stored access information and the verification of the destination.

Preventing information theft

Embodiments of the present invention provide a method and system, including a client and security token, for reducing a size of a security-related object stored in the token. The object is stored in a storage structure that is indexed according to an identity reference to a certificate associated with the object and a private key identifier identifying a private key assigned to an owner of the token. A request to access an encrypted data object results in accessing the private key identifier in the storage structure using only the identity reference as an index.

Reducing a size of a security-related data object stored on a token

An embodiment generally relates to a method of increasing user convenience. The method includes displaying a log-in user interface and receiving an authentication attempt in the log-in user interface. The method also includes determining a status of the authentication attempt and delaying a completion of an authentication attempt by a time-based function in response to a status being a failed authentication attempt.

Time-based function back-off

Embodiments of the present invention provide identity management security domains that may be used in an enterprise security system. A security domain provides a centralized registry of services provided by the enterprise security system. For example, certificate authorities and other services, such as key archives, and the like, in the enterprise security system may register information about themselves in the security domain. Authorized users can then discover the location of these services. In some embodiments, the security domain may provide an interface that indicates a topology between services of the enterprise security system. The security domain may also serve as a distribution point for security policies. A security policy may comprise information that indicates, for example, a set of trusted certificate authorities, certificate templates, certificate revocation lists, and the locations of the services in the enterprise security system.

Methods and systems for managing identity management security domains

Embodiments of the present disclosure provide a flexible way of accommodating typical user errors when attempting to gain access. One method prevents an error in an access protocol by determining if an access request contains an error that may be forgiveable, such as repeated entry of the same incorrect password or the use of all capital letters. If the access request contains an error, the access request will be classified as invalid. As such, the invalid access request will not count against the number of allowed access requests. Errors may include repeated passwords, obvious typographical error, etc. A message may also be provided or sent to the user that informs the user of their error.

Preventing error in an access protocol

Improved Lightweight Directory Access Protocol ('LDAP') server architectures using dedicated threads to respond to different classes of LDAP requests are described and claimed. Some servers classify an LDAP request from a client, then store the classified request with similarly-classified requests. One of the classified LDAP requests is selected and executed to prepare a corresponding LDAP response. Other arrangements are also described and claimed.

Dedicating threads to classes of LDAP service

An embodiment relates generally to a method of assigning roles to a token. The method includes determining a first role for a first participant on a token and providing exclusive access to a first section of the token for the first participant base on the first role. The method also includes determining a second role for a second participant on the token and providing exclusive access to a second section of the token for the second participant based on the second role.

Methods and systems for assigning roles on a token

Systems and methods for providing a multiple source entropy feed for a PRNG that is used to generate server-side encryption keys are disclosed. A data recovery manager may collect additional entropy sources that feed into the PRNG between each key generation. The entropy may be collected from a variety of sources, for example, high-resolution timer intervals between input/output interrupts, hard disk access operations, and the like. The number of bits of entropy collected may be configured for each key generation.

Growing community of inventors

San Jose, CA, United States of America

Steven William Parkinson