Abstract: A method for guaranteeing freshness of results for queries against a non-secure data store extends a read operation to include steps of: receiving a read instruction for application data to be read; determining a location within the data store for the application data to be read; validating a message authentication code contained at the location; parsing data contained at the location into the application data and control information, the control information including: a timestamp, a link to a check entry, and a message authentication code; authenticating the control information for each check item associated with the primary item along a path from the primary item to a root each time a primary item is read from the data store by following links; and transmitting the application data to a calling application.

Abstract: A method for guaranteeing freshness of results for queries against a non-secure data store extends a read operation to include steps of: receiving a read instruction for application data to be read; determining a location within the data store for the application data to be read; validating a message authentication code contained at the location; parsing data contained at the location into the application data and control information, the control information including: a timestamp, a link to a check entry, and a message authentication code; authenticating the control information for each check item associated with the primary item along a path from the primary item to a root each time a primary item is read from the data store by following links; and transmitting the application data to a calling application.

Abstract: A method for guaranteeing freshness of results for queries against a non-secure data store extends a write operation to include steps of: receiving a write instruction for application data to be written into a hierarchical tree structure; incrementing a timer responsive to receiving the write instruction; setting a timestamp to the value of the timer; computing a message authentication code based on the received application data and the timestamp; appending control information to the application data and its corresponding check item; the control information including the timestamp, a link to a check entry, and the message authentication code; writing the application data with the appended control information to the data store as a primary item; and updating the control information for each check item associated with the primary item along a path from the primary item to a root by following links.

Abstract: Apparatus for a multiparty electronic service having at least one host computer being operative to maintain and enforce at least one machine-interpretable service specification (contract) for governing a service between the parties that interact in the processing of a service request. The at least one host computer determines, in accordance with the at least one service specification, the validity of a request and conditionally executes a sequence of processing steps as defined in the service specification. The at least one host computer is further operative to conditionally provide notifications to the contract parties. Machine-interpretable service specifications are negotiated between all parties that cooperate in the processing of a request. Machine-interpretable service specifications can be dynamically added to and cancelled from the system.

Abstract: A method according to the invention extends a write operation to comprise the steps of: receiving a write instruction for application data to be written into a hierarchical tree structure; incrementing a timer responsive to receiving the write instruction; setting a timestamp to the value of the timer; computing a message authentication code based on the received application data and the timestamp; appending control information to the application data; the control information comprising the timestamp and the message authentication code; writing the application data with the appended control information to the data store as a primary item; and updating the control information for each check item associated with the primary item along a path from the primary item to a root by following links.

Abstract: Apparatus for a multiparty electronic service having at least one host computer being operative to maintain and enforce at least one machine-interpretable service specification (contract) for governing a service between the parties that interact in the processing of a service request. The at least one host computer determines, in accordance with the at least one service specification, the validity of a request and conditionally executes a sequence of processing steps as defined in the service specification. The at least one host computer is further operative to conditionally provide notifications to the contract parties. Machine-interpretable service specifications are negotiated between all parties that cooperate in the processing of a request. Machine-interpretable service specifications can be dynamically added to and cancelled from the system.