Abstract: A system (50, 150) for assisting a user (14) to determine whether a hyperlink (152) to a target uniform resource locator (URL) is spoofed. A computerized system having a display unit is provided and logic (158) therein listens for activation of the hyperlink (152) in a message (154). The logic (158) extracts an originator identifier (102) and encrypted data from the hyperlink (152), and decrypts the encrypted data into decrypted data based on the originator identifier (102). The logic (158) determines whether the hyperlink (152) includes the originator identifier (102) and the encrypted data decrypts successfully. Responsive to this it then presents a confirmation of authentication conveying the name of the owner and the domain name of the target URL on the display unit, and it redirects the user (14) to the target URL. Otherwise, it presents a warning dialog to the user (14) on the display unit.

Abstract: A system (50, 150) for assisting a user (14) to determine whether an email (18) comes from a purported originator (16). A computerized system having a display unit is provided. Logic (54) in the computerized system determines whether the email (18) includes an authenticity mark (52) including an originator identifier (102) and encrypted data (104). Logic (54) in the computerized system then decrypts the encrypted data (104) into decrypted data (108-14), based on the originator identifier (102). Logic (54) in the computerized system then presents to the user (14), on the display, whether the email (18) includes the authenticity mark (52), whether the encrypted data (104) decrypts successfully, and information based on the authenticity mark (52) and the decrypted data (108-14).

Abstract: A digital signature verification system wherein a signature system may sign a conversational message, as might be used in a chat, instant messaging or enterprise instant messaging dialog, and a verification system may then verify the signature. The signature system may include a signing entity and a vault, wherein the signing entity provides the message and credentials and the vault creates the signature based on a first hash of the message that is further encrypted with a signature key. The verification system may include a validating entity and a verifier, wherein the validating entity provides the message, the signature, and assertions to the verifier and the verifier then forms a second hash of the message, uses a verification key corresponding with the signature key to decrypt the signature and obtain the first hash, and compares the two hashes to determine a proper validation response.

Abstract: A reliable connectionless protocol is used in a networking environment. A transport layer receives data for transfer between a source node and a destination node on a network. The transport layer divides the data into predetermined length data packets, and generates a segment header for each data packet. The transport layer generates independent segments by combining each data packet with a corresponding segment header. Consequently, each segment, including the first segment and the last segment, contains a data packet. The independent segments are transferred from the source node to the destination node via the network without establishing a connection. A transport layer on the destination node creates local state upon receipt of the first segment, and extracts the data from the data packets to re-construct the original data. The local state is released when the destination node receives the last segment in the message.

Abstract: A data transport system has application for transferring binary large objects (blobs) to one or more clients. The data transport system includes a mass storage device, a high bandwidth network, a blob server and an applications server. The blobs are pre-packetized in a general format compatible with a network protocol in that the packets do not include specific control information that identifies a particular client and a particular request for a blob. At run time, a requesting client generates a request to the applications server to request a blob stored in the mass storage device. In turn, the applications server generates a request, that includes control information to identify the requesting client and the particular request, to the blob server. The blob server accesses the mass storage device to retrieve packets corresponding to the blob requested, and transfers the packets and the control information from the blob server to the requesting client.

Abstract: An improved system and method for providing multimedia data in a networked system is disclosed. The present invention provides a platform for distributed client-server computing and access to data over asymmetric real-time networks. A service mechanism allows applications to be split such that client devices (set-top boxes, personal digital assistants, etc.) can focus on presentation, while backend services running in a distributed server complex, provide access to data via messaging across an abstracted interface.