Abstract: Device A in a public key cryptographic network will be constrained to continue to faithfully practice a security policy dictated by a network certification center, long after device A's public key PUMa has been certified. If device A alters its operations from the limits encoded in its configuration vector, for example by loading a new configuration vector, device A will be denied participation in the network. To accomplish this enforcement of the network security policy dictated by the certification center, it is necessary for the certification center to verify at the time device A requests certification of its public key PUMa, that device A is configured with the currently authorized configuration vector. Device A is required to transmit to the certification center a copy of device A's current configuration vector, in an audit record. the certification center then compares device A's copy of the configuration vector with the authorized configuration vector for device A stored at the certification center.

Abstract: An improved method manages the storage of document images so as to minimize the average access time while minimizing overall storage costs, consistent with the probable usage of the documents for a particular application. Document images can be selectively stored on high speed, low capacity magnetic DASD or alternately on low speed, high capacity optical storage. DASD storage is more expensive than optical storage for a document image. By characterizing the probable use of a document image in association with a case processing work flow within which the document image is to participate, optimum document storage can be achieved. When a case has a predefined plurality of document image types, and a particular document image type is missing, the case can be placed in a pending state while awaiting the receipt of the missing document image. In the pending state, the documents which are members of the pended case can be removed from the DASD and retained on the optical storage device.

Abstract: A data processing system stores and displays digital images, and includes a workstation having a document input scanner for digitizing document images at a first resolution, an image display unit for displaying digitized document images at a second resolution which is less than the first resolution and a printer for printing digitized document images at a third resolution greater than the second resolution. The system reduces communications traffic and assures fast access time on the network since the bulk of the traffic will utilize the smaller compressed data records required for the second resolution. However, these improvements in communication traffic and access time do not sacrifice the availability of high resolution compressed data records occasionally needed for printing and other high resolution operations.

Abstract: A computer method is disclosed for determining predicate-argument structures in input prose sentences of English. The input sentence, in the form of a string of words separated by blanks, is first analyzed (parsed) by a rule component that has access only to morphological and syntactic information about the words. The output of this rule component, in the form of a data structure consisting of attribute-value pairs, is then processed by the argument structure component, which consists of a set of partially ordered procedures that incorporate further linguistic knowledge. The output of these procedures is the same attribute-value structure, now enhanced by the presence of semantic (i.e. meaningful, non-syntactic) attributes. These semantic attributes, taken together, form the argument structure of the input sentence.The resulting invention constitutes a fully modular, comprehensive and efficient method for passing from syntax to the first stage of semantic processing of natural (human) language.

Abstract: The operating principle permits a reader of an electronically published document to create notes, bookmarks, or annotations and relate them to a particular location in the document. The record of such annotations or "place marks" can be stored within or separately from the published material. Annotations stored separately from the originally published document are associated by name with the document and can either be accessed by a particular individual reader and/or shared and exchanged between individuals with access to the same (or copies of the) published electronic document for a variety of purposes. The attachment of annotations is a capability provided to the reader of an electronic document and does not require any specific preparation on the part of the writer or editor of an electronic document.

Abstract: The patent describes a method and apparatus for securely distributing an initial Data Encryption Algorithm (DEA) key-encrypting key by encrypting a key record (consisting of the key-encrypting key and control information associated with that key-encrypting key) using a public key algorithm and a public key belonging to the intended recipient of the key record. The patent further describes a method and apparatus for securely recovering the distributed key-encrypting key by the recipient by decrypting the received key record using the same public key algorithm and private key associated with the public key and re-encrypting the key-encrypting key under a key formed by arithmetically combining the recipient's master key with a control vector contained in the control information of the received key record.

Abstract: A method is disclosed for deleting a marked portion of a structured document so as to prevent damaging the structure of the document. The method examines the contents of a marked portion of a structured document and determines which begin and end tags are unmatched. A begin tag whose end tag has not been marked or vice versa, is flagged so that it is not deleted when the contents of the mark are deleted. This allows the Structured Delete function to delete a marked portion of the structured document without damaging the document's structure.

Abstract: A data processor is disclosed which enables the selective simultaneous or asynchronous execution of mutually independent instructions of different classes in parallel coupled execution units and which enables the sequential execution of mutually dependent instructions of different classes by delaying the execution of a dependent instruction in a second execution unit until the completion of execution of a precursor instruction in a first execution unit. The instructions are dispatched to respective ones of a plurality of parallel coupled execution units, in accordance with their instruction class.

Abstract: A computer method is disclosed for using rewrite rules of the form X(Y)Z=(R) where X is the left context, Y is the body of the rule, Z is the right context and R is the replacement value for Y if the rule is successful. The method places restrictions on how the rules are defined to make it possible to organize the rules so that they can be indexed efficiently. In particular, the body of the rules is not allowed to be defined in generic terms, whereas this restriction is not applied to the left and right context of the rules. The rules are scanned so that the first rule that matches the body and its context is the one that applies. Ordering the rules into a hierarchy makes it possible to have exceptions to any particular rule. The method encompasses a model where the rules are applied to any input string. When no rules apply to any character of the input string, a default rule to copy the string is applied. This guarantees that the process will always terminate and that it will be loop-free.

Abstract: A requested cryptographic function is validated for performance in conjunction with a cryptographic key, by inputting a first portion of an associated control vector into a first control vector checker, which outputs a first authorization signal if the requested cryptographic function has been authorized by the originator of the key. A second portion of the control vector is input to a second control vector checker, which outputs a second authorization signal if the requested cryptographic function has been authorized by the originator of the key. Both the first and the second authorization signals are applied to a cryptographic processor which initiates the execution of the requested cryptographic function.

Abstract: A data processing method is disclosed for storing and retrieving text. The storage part of the method includes the steps of compiling a vocabulary list of words occurring in the text and augmenting the vocabulary list with lemmas of the words in the text, as an augmented word list. It then continues with the steps of compiling a cross reference table relating the lemmas of the words to locations of the words in the text and storing the text, the augmented word list and the cross reference table.The retrieval part of the method includes the steps of inputting a query word to access a portion of the stored text, searching the augmented vocabulary list using the query word as a search term, and accessing the cross reference table with a lemma of the query word to locate the portion of the stored text.The resulting invention enables a faster performance for "fuzzy" searches of text in documents, while enabling the cross reference lists used in the retrieval process, to be compactly stored.

Abstract: A system is disclosed for providing an automatic interface between a host based, menu driven application program and a telephone network. The system includes a host access table stored in a memory in the workstation, containing operational commands. An interface program stored in the workstation memory executes the commands in the host access table, to perform interfacing functions between the host application program and the telephone network.

Abstract: A system is described in which a user enters a search term at a user location, that search term being associated with a plurality of image objects which are stored at a plurality of geographically diverse locations within the system. The search term is then transmitted to a central index location where there is stored a central index which includes the object name and location and associated data for each of the distributed objects associated with the search term. Optionally, the associated data may be transmitted from the central location back to the user location for display to the user, who can then select which of the several objects or perhaps all of the objects to be accessed from the diverse geographic storage locations. The user can enter his selection at the user location and that selection will be transmitted back to the central index location.

Abstract: A method is disclosed for copying a marked portion of a structured document so as to prevent damaging the structure of the document at the target location where the contents of the mark is to be inserted. The method includes determining whether there are unbalanced begin tags or end tags in the portion to be copied and then inserting additional tags to balance the missing tags at the target location.

Abstract: A method and apparatus in a public crypto system, control the use of a public key, based on the level of import integrity for the public key. The method and apparatus generate a control vector associated with the public key, having a history field. The public key and the control vector are transmitted from the location of generation over a communications link to a receiving location, using the selected one of a plurality of levels of import integrity for the transmission. At the receiving location, the public key and the control vector are tested to determine the actual level of import integrity for the transmission. Then, a value is written into the history field of the control vector which characterizes the actual level of import integrity.

Abstract: A method and apparatus which allows an object management and delivery system to perform capture, prefetch, display, print and/or modify operations with only a modicum of interaction between the operations of a host computer system and the object management and delivery system. Host computer/object-management system interaction is typically limited to: operation requests transferred from the host computer to the object management system; record registration data transferred from the object management system to notify the host computer that an object record has been stored; and/or error data transferred from the object management system to notify the host computer when the object management system encounters an error in trying to perform an operation requested by the host computer.

Abstract: In a system for capturing an image of a document having a characterizing indicium associated therewith, the invention includes the step of storing in the system a plurality of document templates. Each document template defines locations of a first type and second type information blocks on a corresponding one of a plurality of document types. The document templates are accessible by an indicium value. The invention further includes storing in the system a table relating the first type information block to first type processing parameters and a second type information block to second type processing parameters. The invention further includes the step of capturing an image of the document and storing the image in an image buffer. Then, a characterizing indicium associated with the document is recognized by the system. Thereafter, one of the plurality of document templates is accessed in response to a value of the recognized characterizing indicium associated with the document.

Abstract: The distributed auditing subsystem invention runs in a UNIX-like operating system environment with a hierarchical file system. The invention provides an audit trail of accesses to the objects it protects and maintains and protects that audit trail from modification or unauthorized access or destruction. The audit data generated by the invention is protected so that read access to it is limited to those who are authorized for audit data. The invention enables the recording of events which are relevant to the maintenance of the security of the system, such as the use of identification and authentication mechanisms, the introduction of objects into a user's address space, the deletion of such objects, actions taken by computer operators and system administrators and/or system security officers, and other security relevant events. The invention generates an audit record for each recorded event which includes the date and time of the event, the user, the type of event, and the success or failure of the event.

Abstract: The invention is characterized as a data processing architecture and method for multi-stage processing of mail, using knowledge based techniques. The system includes OCR-scanning a multipart address field of a mail piece at a sending location, the address field including at least two portions, a first stage routing portion (destination city, state, country, zip code) and a second stage routing portion (destination street address, building floor, corporate addressee internal routing). At the sending location, the image of the entire address field is captured by an OCR head and stored in memory. A serial number is printed on the mail piece. The first routing portion is then converted into sorting signals to sort the mail piece to a truck at the sending location which is to be dispatched to the city, state and country indicated in the first stage routing portion.

Abstract: The improved gate drive circuit provides a continuous gate current whenever there is sufficient anode-to-cathode voltage difference across the SCR. This approach described herein eliminates the need to monitor and reapply SCR gate current after each commutation due to load current distortions. Previous SCR gate driver designs used a pulse train of gate currents to provide a means of keeping the SCRs turned on. The pulsed gate control approach has gaps in the SCR's operation and requires significant circuitry that dissipates much more drive energy. Energy for this improved driver circuit is derived from the SCR anode-to-cathode voltage differential. This eliminates the need for individual power supplies to provide isolated gate signals for each SCR. This self-powering feature reduces the intricacy of controlling multiple SCRs in multi-phase or unreferenced power systems. Flexibility provided by this method allows high power SCRs to be directly interfaced to a digital processor-type controller.