Abstract: Exemplary embodiments for data security include a data access proxy coupled with a database, further coupled with a server configured to operate the data access proxy to: identify a user and request to access a data item; validate the user and request, including inspecting the user's identity, evaluating the user's history, and evaluating permissions and restrictions associated with the user and the data item; access the database to retrieve the data item; inspect security attributes related to the data item; and transform the data item based on one or more privacy rules, including redacting the at least one data item, deleting information from the at least one data item, substituting information from the at least one private data item with other information, adding information to the at least one data item, providing synthetic data as a private data item, or providing proxy data for the data item.

Abstract: In a client, a system receives a set of transformation functions for use in transforming a first content, requests the first content from a gateway, and receives the first content from the gateway, including an invocation of at least one transformation function maintained on the client. The system invokes the at least one transformation function to transform the first content to access a second content on the server. In a gateway communicating with a server, a system transmits a set of transformation functions to at least one client for use in transforming a first content, receives a request from at least one client for the first content residing on the server, rewrites the first content to include the invocation of at least one transformation function maintained on the client, and transmits the first content including the invocation of at the least one transformation function maintained on the client.

Abstract: A touch screen display system combines the use of electromagnetic radiation emitters with shadow detection to determine the precise location or other touch related parameters of an object touching the display screen. In one embodiment the system comprises a display screen, a plurality of laser emitters disposed at a periphery of the display screen; a plurality of beam shapers to shape emissions from the emitters into fan beam patterns, and a plurality of detectors disposed at the periphery of the display screen to detect laser emissions of the laser emitters; and a processor to determine a location where an object touches the display screen, based on outputs of the detectors.

Abstract: A system and method are directed to managing text input. An image of a virtual keyboard is displayed to a user. The user enters text by using the virtual keyboard image and an input device, such as a pointing device. The image is repeatedly altered, such as by position, size, angle, or shape. One technique includes altering the image after each selection of a virtual key is made. One aspect of the invention includes determining sensitive input fields within a page and facilitating the use of the virtual keyboard for those fields. The invention can be used to improve security when the possibility of keyboard sniffers exists.

Abstract: A method and apparatus for accessing a destination computer behind a firewall using a browser are described. In one embodiment, the method includes an intermediary service receiving a destination computer request, which demonstrates that the destination computer is available to be accessed, and receiving a browser request to access the destination computer. The method then includes the intermediary service associating the browser with the destination computer and providing communication between the browser and the destination computer. The communication is being provided in a form acceptable to the firewall.

Abstract: In a client, a system receives a set of transformation functions for use in transforming a first content, requests the first content from a gateway, and receives the first content from the gateway, including an invocation of at least one transformation function maintained on the client. The system invokes the at least one transformation function to transform the first content to access a second content on the server. In a gateway communicating with a server, a system transmits a set of transformation functions to at least one client for use in transforming a first content, receives a request from at least one client for the first content residing on the server, rewrites the first content to include the invocation of at least one transformation function maintained on the client, and transmits the first content including the invocation of at the least one transformation function maintained on the client.