Abstract: A solution for replicating protected data is provided. A manifest is managed along with the protected data at each computing device as well as at a server. The manifest is also protected and includes an entry for each protected data item in the protected data. The protected data at each computing device is replicated using both the local version of the manifest and the server version of the manifest. In an embodiment, each entry in the manifest includes an update identifier that can be compared with an update identifier stored with the protected data item as well as the update identifier in a local version of the manifest. In another embodiment, the manifest includes an entry for each computing device that includes a replication identifier. These entries can be used to perform additional checks to ensure that the manifest and/or protected data has not been compromised.

Abstract: Under the present invention, a method, system, and program product for providing an untrusted certificate store for secure e-mail is provided. The method for providing the untrusted certificate store (UCS) includes obtaining particular information from either an e-mail message or directory that includes either, or both of, an untrusted certificate and an e-mail address and storing it/them in the UCS and then automatically maintaining the information in the UCS.

Abstract: Under the present invention, when a request for a certificate is made, a set of (mapping) rules are used to identify an appropriate directory and any other information sources, and to retrieve information for the certificate therefrom. The directory name is then transformed using the set of rules for use in the certificate. Thereafter, a template for the certificate is developed using the set of rules. The template and the request are then communicated to the PKI, which will generate and return the certificate. Upon receipt, the present invention can verify that the certificate actually includes the transformed name.

Abstract: The present invention provides a method, system, and computer program product for transparent on-demand certificate provisioning for secure email. The method comprises: generating a keypair and a self-signed certificate; requesting a certificate from a certification authority; temporarily securing email using the self-signed certificate; and securing email using the requested certificate, after receipt of the requested certificate from the certification authority. The present inventions uses self-signed certificates as an initial, interim security mechanism, provides automatic submission of certificate requests and renewal requests, provides an administrative policy to specify when keypairs and self-signed certificates are generated by a user's client system, and when certificate requests are submitted, and provides automatic transition from end-user defined trust to delegated trust based upon CA-issued certificates.

Abstract: A personal credential store that aggregates a number of physical credential stores beneath an application programming interface (API) and offers tag-based credential look-up. The API of the disclosed system runs on the user's client system, and effectively hides the underlying credential store types from applications using it. The tags used to look up credentials through the API may advantageously include or consist of unique identifiers indicating the functional purpose of the desired credential. The types of physical credential store aggregated together under the disclosed API may include a local credential store, a network-resident private credential store that may be shared across multiple client systems operated by a single user, and a network-resident shareable credential store, that may be used by processes acting on behalf of the user, and/or shared by multiple users.

Abstract: A method, system and apparatus for the transparent security for electronic mail (e-mail) messages. A method for transparently securing an e-mail message can include producing a secured form of an e-mail message and identifying at least one designated recipient of the e-mail message for whom a secured form of the e-mail message cannot be produced and understood. Consequently, the secured form can be selectively transmitted to designated recipients able to process the secured form, while an unsecured form of the e-mail message can be transmitted to those identified recipients unable to process the secured form without first requiring confirmation from a sender of the e-mail message to transmit the unsecured form instead of the secured form.

Abstract: Apparatus for automatically feeding sheet material such as fan fold paper to a photocopier in which the apparatus may be movable towards and away from the window of the photocopier either by disconnecting the apparatus completely from the photocopier by means of readily releasable clamps or by pivoting part of the apparatus away from the window of the photocopier whereby the apparatus may be used not only to photocopy fan fold paper but used in a conventional manner to photocopy normal documents. Control signals to operate the apparatus are derived by a light sensitive means viewing the light source within the photocopier through the window of the photocopier.