Abstract: Techniques are disclosed for generating, utilizing, and validating traceable image CAPTCHAs. In certain embodiments, a traceable image is displayed, and a trace of the image is analyzed to determine whether a user providing the trace is human. In certain embodiments, a computing device receives a request for an image, and in response, creates a traceable image based upon a plurality of image elements. The computing device transmits data representing the traceable image to cause a second computing device to display the traceable image via a touch-enabled display. The computing device receives a user trace input data generated responsive to a trace made at the second computing device, and determines whether the trace is within an error tolerance range of the set of coordinates associated with the traceable image. The computing device then sends a result of the determination.

Abstract: A virtual directory server (VDS) provided according to an aspect of the present disclosure maintains attribute data identifying a corresponding set of stored attributes associated with each data source, with each data source storing values for associated set of stored attributes. Upon receiving a first request based on query attributes, the VDS identifies a set of data sources based on the stored attribute data, with each data source storing values for at least one of the query attributes. The VDS then forms constituent requests, with each constituent request having a corresponding pruned filter suitable for the respective data source. The constituent requests are sent to the respective data sources. The VDS forms a final response from the constituent responses received from the corresponding data sources by joining the constituent entries, and sends the final response to a client system from which the first request is received.

Abstract: An aspect of the present invention provides for protection of resources hosted on enterprise systems. In an embodiment, an enterprise system receives a request from a portable device to download a resource, and in response formulates multiple security actions and associated conditions for the requested resource. The enterprise system sends the requested resource, the security actions and the conditions to the portable device. The portable device determines whether each condition is satisfied and performs the security actions associated with the conditions determined to have been satisfied. Due to the ability to send multiple security actions and associated conditions, better control in protection and retention of downloaded resources is obtained.

Abstract: A virtual directory server (VDS) processes requests based on a first hierarchical model while using a backend server operating based on a relational model. In one embodiment, classes representing the tables and columns in the relation model are generated according to a second hierarchical model (class hierarchy). On receiving a directory request for values' corresponding to attributes in the first hierarchical model, tables and columns corresponding to the requested attributes are identified. A query according to the relational model is constructed employing the generated classes (of the second hierarchical model), the query including the identified tables and columns. The query is then executed in the backend server to retrieve the values corresponding to the attributes, and the values are then sent (according to the first hierarchical model) as a reply to the directory request.

Abstract: A virtual directory server (VDS) processes requests based on a first hierarchical model while using a backend server operating based on a relational model. In one embodiment, classes representing the tables and columns in the relation model are generated according to a second hierarchical model (class hierarchy). On receiving a directory request for values' corresponding to attributes in the first hierarchical model, tables and columns corresponding to the requested attributes are identified. A query according to the relational model is constructed employing the generated classes (of the second hierarchical model), the query including the identified tables and columns. The query is then executed in the backend server to retrieve the values corresponding to the attributes, and the values are then sent (according to the first hierarchical model) as a reply to the directory request.