International Business Machines Corporation

Theodore Jack London Shrader

Bruce Arland Rich

Julianne Yarsa

Anthony Joseph Nadalin

Donna E Skibbie

Davis Kent Soper

Garry Lee Child

Richard Jay Cohen

Michael Bradford Ault

Ernst Robert Plassmann

Xiaoyan Y Zhang

David Kingsley Clark

Randy Scott Humphrey

Shaw-Ben Shi

Umesh Gopaldas Khatwani

Mickella Ann Rosiles

William Harold Gengler

Lok Yan Leung

John Lawrence Bunce

David Salinas

Julie Louise Gilbreath

Mary Wier Ferguson

Juan Manuel Nuncio

Provided are a computer implemented method and apparatus for manipulating data through directional or ordered selection of data. A first user input is received for selecting a section of data in a direction of selection, or an order of selection, from a source. A second user input is received for performing a basic editing operation on the selection. Responsive to the second input received from the user, the selected section of data is re-oriented or re-ordered in a direction or order corresponding to the direction or order of selection. A third user input is received for performing a basic editing operation at a destination. The re-oriented or re-ordered section of data is subjected to the second action at the destination. Once the user has selected a section of data, the user can also choose to re-orient or re-order the data in conjunction with a basic editing operation by selecting an enhanced editing operation that implements the inventive method from a menu.

Method and apparatus for implied editing action through directional and ordered data selection

A web browser application program provides graphical print techniques, which allow the user to control how a web page is presented. The data processing system, under instruction of a program, responds to an instruction by the user to present a selected portion of a first document by creating a new document from the first document including the header, trailer, and the selected portion. The data processing system responds to an instruction by the user to change the font size of a selected portion of the first document by creating a copy of the first document and modifying or inserting font tags within the copy of the document. The data processing system responds to an instruction by the user to present the first document with page break indicators by creating a copy of the first document and inserting page break indicators within the copy to be presented to the user. The graphical print techniques may also be used together.

Method and system for incorporation of graphical print techniques in a web browser

A program written in untrusted code (e.g., JAVA) is enabled to access a native operating system resource (e.g., supported in WINDOWS NT) through a staged login protocol. In operation, a trusted login service listens, e.g., on a named pipe, for requests for login credentials. In response to a login request, the trusted login service requests a native operating system identifier. The native operating system identifier is then sent to the program. Using this identifier, a credential object is then created within an authentication framework. The credential object is then used to login to the native operating system to enable the program to access the resource. This technique enables a JAVA program to access a WINDOWS NT operating system resource under the identity of the user running the JAVA program.

Method for enabling a program written in untrusted code to interact with a security subsystem of a hosting operating system

A system, method, and related computer program for automatically cataloging Web elements, such as text and color, in a Web document for use by those performing searches for Web documents containing specific Web elements. The present invention allows users to scan Web elements into a Web site database where they are automatically cataloged for future searches of the particular element data. Searchers can search for a source document containing a particular color and/or text. Users may enter values related to scanned-in Web elements on source documents, such as an alternate color that may be used in addition to or instead of the scanned in color on said source document. Web elements or graphics are cataloged in a manner that allows users to query an entire set of objects quickly by accessing the database values. A user is able to automatically change text or color values on a global basis. Alternate values entered into the Web site database override Web element data previously scanned into the database.

Method for automatically cataloging web element data

The present invention provides a method, apparatus, and computer implemented instructions for executing cryptographic operations. Responsive to a request to perform a cryptographic operation, one (or more) of a software process and a hardware process is selected for performing the cryptographic operation based on a policy which process results with available resources to perform the cryptographic operation to form a selected process. The cryptographic operation is performed using the selected process. Necessary object conversions, which is transparent to the application, is carried out in order to convert objects to usable forms of the selected process(es).

Method and apparatus for dual hardware and software cryptography

A frames-based Web browser is used with existing distributed computing environment (DCE) interfaces to facilitate and simplify management of DCE cells. In the preferred embodiment, administration may be performed from any secure Web browser acting as a client. Management data is typically supported on a target Web server. At the browser, CGI scripts are used to dynamically generate HTML (hypertext markup language) pages based on the network administrator's selections and the current state and defined objects in the DCE cell. The result is a robust and efficient Web-based DCE management scheme.

Method and system for web-based DCE management

A system, apparatus and method for processing Personal InFormation EXchange Syntax (PFX) objects in a data processing system is presented. The PFX object may be formatted, i.e. may maintain a syntax, as defined by PKCS (Public Key Cryptography Standard) standards, and in particular PKCS #12. A PFX object utility allows a user to view and edit the contents of data objects embedded within a PFX object via a graphical user interface. Graphical objects represent the data objects embedded within a PFX object. A user may drag and drop objects onto other objects within the PFX object, and the PFX object utility automatically performs the necessary operations.

System, apparatus and method for presentation and manipulation of personal information syntax objects

An analysis of at least one authentication token for an application is provided. At least one login module within the application is identified. Responsive to a failure to access the application, principal information is retrieved associated with the at least one login module. A recovery action is then generated. The recovery action corresponds to the failure and the principal information.

Architecture for the graphical management and analysis of authentication tokens

A mechanism that allows enterprise authorities to be informed when security-sensitive decisions or actions have been or are attempting to be made by users of untrusted code executing in the trusted computing base. The mechanism may be implemented as an abstract class that is part of the trusted computing base. The class provides a framework abstract enough to permit multiple possible notifications (e.g., providing an e-mail to a system operator, sending an Simple Network Management Protocol (SNMP) alert, making an entry in an online database, or the like) in the event that a given action is taken by a user of untrusted code. The abstract class may provide a default notification, or the class may be extended to enable an authority to provide its own set of customized notifications.

Notification of modifications to a trusted computing base

An apparatus and method for managing keystores is implemented. A distributed keystore is established by aggregating individual. The distributed keystore may, be organized in a multi-level structure, which may be associated with an organizational structure of an enterprise, or other predetermined partitioning. Additionally, a centralized management of certificates may be provided, whereby the expiration or revocation of the certificates may be tracked, and expired or revoked certificates may be refreshed. The keystore may be updated in response to one or more update events.

Composite keystore facility apparatus and method therefor

A method and system for processing enveloped data objects in a data processing system. The enveloped data object may be formatted as defined by PKCS (Public Key Cryptography Standard) standards. An enveloped data object utility allows a user to view and edit the contents of data objects embedded within an enveloped data object via a graphical user interface. Graphical objects represent the data objects embedded within an enveloped data object. A user may drag and drop objects onto other objects within the enveloped data object, and the enveloped data object utility automatically performs the necessary encrypting operations. Logical associations between data objects contained within the enveloped data object are determined or created, and the logical associations are displayed using visual indicators. As data objects are added or deleted through user actions on the graphical objects, the visual indicators are updated.

Method and system for presentation and manipulation of PKCS enveloped-data objects

A framework for processing signed applets that are distributed over the Internet. Using the framework, an applet that is packaged as a Netscape- or JDK-signed jar file, or as an Internet Explorer-signed cab file, is processed within the same Java runtime environment irrespective of the browser type (i.e. Netscape Communicator, Internet Explorer or JDK) used to execute the applet. When the applet is executed, the framework verifies one or more applet signatures using the same algorithm that was used to sign the applet, verifies the signer(s) of the applet, and stores information about the signers so that they can be honored by a security policy when permissions for the applet are determined.

Method and computer program product for processing signed applets

A method and system for processing PKCS-attributes and user-defined attributes in heterogeneous environment is provided. Attributes are registered with a PKCS9 gateway class, and the attributes include user-defined attributes and PKCS-standard defined attributes. Each of the registered attributes is associatively stored with an identifier. A method in the PKCS9 gateway class may be called with a parameter containing an object identifier for an attribute. An attribute mapping data structure is searched using the object identifier in the received parameter, and in response to finding a matching object identifier, a class identifier that has been associatively stored with the matching object identifier is retrieved from the attribute mapping data structure. A method in the class identified by the class identifier is then called. The called method may include an operation for construction, attribute conversion to and from DER-encoding, attribute differentiation, and attribute value extraction. A class hierarchy of attribute types is based on an abstract class for all attribute objects with a subclass for undefined attributes and a subclass for defined attributes. The subclass for defined attributes is further decomposed into a subclass for each PKCS-defined attribute and a subclass for each user-defined attribute.

Managing and extending attribute values for public key cryptography standards

A method, program and system for mapping ASN.1 data to an object model are provided. The invention consists of identifying the start of a data stream and then generating a new object name for the data. Next, the data is parsed to get the identifier and the data length. Then the data's tag type is analyzed. If the tag type is simple, a class diagram is generated for the data and then the source code for the data is generated. If the tag type is not simple, a subroutine is called to further parse the data before generating the class diagram and source code.

Strategy for dynamically modeling ASN.1 data to an object model

A method and apparatus in a data processing system for displaying data. A stream of data is received. The stream of data is displayed in a scrolling display field in which data is scrolling. Responsive to a user input selecting a portion of the data in the stream of data being displayed, scrolling of the data is halted in the scrolling display field. A stationary display field is created. Scrolling of the data on the scrolling display field is restored. Responsive to changes in the selected data in the stream of data being received, the scrolling display field and the stationary display field are updated.

Growing community of inventors

Austin, TX, United States of America

Theodore Jack London Shrader