Abstract: Systems and methods for a smart card accessible over a personal area network (PAN). An example method may include: communicatively coupling a device to the PAN, storing a digital certificate that identifies a user, logging the user on to an additional device within the PAN, and providing an encryption service for the additional device, by: receiving a message to be encrypted, encrypting the message, sending the encrypted message to the additional device via the PAN, receiving an encrypted version of an additional message, decrypting the additional message using the private key associated with the user to produce an unencrypted version of the additional message, and sending the unencrypted version of the additional message to the additional device via the PAN.

Abstract: Information to link two attributes in a database is stored, and when one of the attributes is updated, a new value for the second attribute is computed and stored. Related systems and applications are also described.

Abstract: Systems and methods for a smart card accessible over a personal area network (PAN). An example method may include: communicatively coupling a device to the PAN, storing a digital certificate that identifies a user, logging the user on to an additional device within the PAN, and providing an encryption service for the additional device, by: receiving a message to be encrypted, encrypting the message, sending the encrypted message to the additional device via the PAN, receiving an encrypted version of an additional message, decrypting the additional message using the private key associated with the user to produce an unencrypted version of the additional message, and sending the unencrypted version of the additional message to the additional device via the PAN.

Abstract: Some embodiments of a smart card accessible over a personal area network have been presented. In one embodiment, an apparatus includes a wireless transceiver to communicatively couple to a personal area network (PAN) to receive an authentication request via the PAN from a device. The device may include a computer. The apparatus further includes a storage device to store a digital certificate that uniquely identifies a user. An authentication module in the apparatus may authenticate the user in response to an authentication request from the device using the digital certificate, wherein the user is allowed to access the computer upon authentication.

Abstract: A distributed database server receives an operation request including a flag to cause recursive lock-and-propagate operation, acquires a local lock, tests the operation locally and propagates the recursive request to a peer database server. Specific implementations within a Lightweight Directory Access Protocol (“LDAP”) server are described.

Abstract: Some embodiments of a method and apparatus for protecting web pages against phishing have been presented. In one embodiment, a user interface control is created at a client machine. A user may submit a request to protect a web page via the user interface control. In response to the request, a web page protection module may protect the web page against phishing based on content of the web page. In some embodiments, the web page protection module may be integrated with a network access application, such as, for example, as a plug-in to a browser.

Abstract: A method and apparatus to prove user assertions. A client request to authenticate a user assertion pertaining to user personal data may be received. The requested authentication may be generated for the client, the authentication proving the user assertion without revealing other information about the user. The requested authentication may be sent to the client.

Abstract: A computing device receives a request to perform a Lightweight Directory Access Protocol (“LDAP”) database operation and propagates the request to perform the LDAP database operation to a peer server to test the LDAP database operation at the peer server. The computing device executes an action on a distributed LDAP database based on a result of testing the LDAP database operation at the peer server.

Abstract: Some embodiments of graphical spam detection and filtering have been presented. In one embodiment, an electronic mail addressed to an electronic mail account is screened. If a graphic image is embedded in a body of the electronic mail and a sender of the electronic mail is unidentified, then the electronic mail is classified as unsolicited bulk electronic mail.

Abstract: Some embodiments of a smart card accessible over a personal area network have been presented. In one embodiment, an apparatus includes a wireless transceiver to communicatively couple to a personal area network (PAN) to receive an authentication request via the PAN from a device. The device may include a computer. The apparatus further includes a storage device to store a digital certificate that uniquely identifies a user. An authentication module in the apparatus may authenticate the user in response to an authentication request from the device using the digital certificate, wherein the user is allowed to access the computer upon authentication.

Abstract: Some embodiments of a smart card accessible over a personal area network have been presented. In one embodiment, an apparatus includes a wireless transceiver to communicatively couple to a personal area network (PAN) to receive an authentication request via the PAN from a device. The device may include a computer. The apparatus further includes a storage device to store a digital certificate that uniquely identifies a user. An authentication module in the apparatus may authenticate the user in response to an authentication request from the device using the digital certificate, wherein the user is allowed to access the computer upon authentication.

Abstract: A computing device receives a request to perform a Lightweight Directory Access Protocol (“LDAP”) database operation and propagates the request to perform the LDAP database operation to a peer server to test the LDAP database operation at the peer server. The computing device executes an action on a distributed LDAP database based on a result of testing the LDAP database operation at the peer server.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving a request for data in a lightweight directory access protocol (LDAP) directory. The method may further include checking any one or more of an LDAP cache and an LDAP index for an LDAP attribute pertaining to requested data, the checking comprising determining if a time-to-live for the LDAP attribute or the LDAP index has expired, and returning the data to the client.

Abstract: Virtual attribute logic adds virtual attributes to a Lightweight Directory Access Protocol (“LDAP”) response, and meta-virtual attribute logic adds additional virtual attributes to provide further information about the virtual attributes. For example, a Distinguished Name (“DN”) of an entry that provided a virtual attribute may be added by the meta-virtual attribute logic.

Abstract: Some embodiments of zero knowledge attribute storage and retrieval have been presented. In one embodiment, the content of a piece of data is encrypted at a client machine. Further, an identifier of the piece of data is hashed at the client machine. The encrypted content and the hashed identifier may be stored in a database maintained by a server without disclosing the content of the data to the server.

Abstract: A distributed database server receives a recursive lock/search request, acquires a local lock, and propagates the recursive lock/search request to a peer database server. Specific implementations within a Lightweight Directory Access Protocol (“LDAP”) server are described, and applications that can benefit from the recursive locking and searching functionality are discussed.

Abstract: Alternative views for a selected distinguished name entry in current view are identified through subviews. Each subview corresponds to an attribute defined by a dynamic view object in a schema for a lightweight directory access protocol directory. The subviews are searched to find those that have entries that match the value of the selected distinguished name entry. In one aspect, the attribute is a virtual attribute.

Abstract: Template entries are added to a Lightweight Directory Access Protocol (“LDAP”)-accessible database, containing attributes that affect new records added to the database, attributes returned in response to an LDAP query, and records identified through an LDAP search operation. Static and dynamic attributes are discussed.

Abstract: A method and apparatus for secure information transfer using dedicated public key pairs for articles of information. A first public key pair may be generated for an article of information. The article of information may be combined with a first public key from the first public key pair to form an information packet. The information packet may be digitally signed with a second private key from a second private key pair.

Abstract: A method and apparatus for applying access control instructions to attributes. A request is received for permission to perform an operation on an attribute associated with an access control instruction. The access control instruction specifies an allowed type of channel for the operation. If a secure channel has been established with the requester, the permission to perform the action is granted.