Abstract: A machine-implemented method for signing a JSON message begins by constructing a reference element for each data object in the JSON message. The data object is identified by a reference identifier that includes a pointer to a digest method, and a digest generated by applying the digest method to the data object. Then, a signature information element is constructed for reference elements corresponding to data objects in the message. The signature information element includes a pointer to a signature method, as well as one or more reference elements, or a canonical form of the one or more reference elements. Then, a signature element is constructed that includes the signature information element, and a signature value generated by applying the signature method to the signature information element. The signature enables a sending entity to generate a digest on a JSON message and to secure the digests using a signing key.

Abstract: A system and method for implementing distributed transactions using configuration data that is available to all applications which may wish to access the data. Added to the configuration data is at least one status indicator to allow applications to ascertain the status of updates without performing a database-specific distributed transaction. An application which is preparing to write/update stored information must first change the at least one status indicator associated with the underlying storage. Thereafter, any other application which has a need to read or write the stored information will readily ascertain the status of the stored information from the configuration data. The other application which has need of the data may choose to read the old and/or partially updated data or may wait until the update has been completed and the at least one status indicator has been changed to indicate completion of the update.

Abstract: A method of auditing login activity in a distributed computing environment in which users attempt to log into the environment from workstations using an authentication protocol in which a ticket request and pre-authentication data are communicated from the workstation to an authentication server. The pre-authentication data includes information establishing an identity of the user and providing a proof that the user has entered a password during the login attempt. The method is effected as a background process during the login, and is initiated after the ticket has been returned to the workstation from the authentication server to avoid RPC deadlock. To audit the login, information from the pre-authentication data is used to obtain a simple name of the user. The simple name is then converted into a global format and evaluated. If the name is recognized, it is passed along with the workstation address to an audit API. If the name is invalid, the audit is suspended.

Abstract: An improved finger touch and stylus detection system for use on the surface of a display device is disclosed. An overlay having horizontal and vertical transparent conductors is coupled to the other elements of the system through a bus having a minimum number of bus wires. A control processor issues command signals which selectively couples the transparent conductors to a capacitive measuring device and a radiative measuring device to determine finger and stylus position respectively. The improvements to the system include a radiative stylus having a spherical antenna which receives the overlay signal independent of the angle at which it is held. Further, a contact detecting mode has been added to eliminate spurious stylus positions measured between strokes, when the stylus is proximate to but not in contact with the overlay.