Abstract: A social networking site host includes, in a user's profile, information that has been attested to and verified by both the user and an independent verifier. The independent verifier is an accepted authority with direct knowledge of the information. Both the user and verifier attest to the information by digitally signing the information and including the digital signature with the information. The host or visitors to the social networking site can authenticate the information by using both digital signatures. By authenticating the information, visitors and users viewing information on the social networking site can assume that the information is trusted and accurate.

Abstract: Some embodiments of zero knowledge attribute storage and retrieval have been presented. In one embodiment, the content of a piece of data is encrypted at a client machine. Further, an identifier of the piece of data is hashed at the client machine. The encrypted content and the hashed identifier may be stored in a database maintained by a server without disclosing the content of the data to the server.

Abstract: A method and apparatus for maintaining logs for a Lightweight Directory Access Protocol (LDAP) directory server. The method includes receiving or detecting events or activities in the system to be logged. The events are transformed into LDAP entries and stored in an LDAP repository. The LDAP entries may then be searched and operated on using LDAP operations, thereby providing enhanced utility and functionality for log data using LDAP operations and an LDAP repository.

Abstract: Embodiments of the present invention provide a method and system for dynamically creating a view in a distributed processing system. The system can have nodes such as a service node and a directory with entries. An object class of a view can be defined as including an attribute type that accommodates a new attribute value. An attribute value associated with one of the nodes can be received at the service node whereupon it can be determined whether the attribute value is associated with the new attribute value. A new view can be created if the attribute value is associated with the new attribute value.

Abstract: A method and apparatus for ordering callbacks for server plug-ins of a Lightweight Directory Access Protocol (LDAP) directory server. Each plug-in registers with the LDAP server and has a designated priority and set of dependencies. The priority and dependency data are stored in an LDAP callback configuration entry or set of entries. The LDAP server analyzes the priority and dependencies to determine the order of each plug-in or individual callback relative to one another. This allows the LDAP directory server and LDAP operations to rely on the order of callbacks thereby improving the efficiency of the system.

Abstract: Some embodiments of graphical spam detection and filtering have been presented. In one embodiment, an electronic mail addressed to an electronic mail account is screened. If a graphic image is embedded in a body of the electronic mail and a sender of the electronic mail is unidentified, then the electronic mail is classified as unsolicited bulk electronic mail.

Abstract: Some embodiments of managing data using state transition controlled attributes have been presented. In one embodiment, a workflow management policy and a set of states are defined at a server coupled to one or more client machines, each of the states corresponding to a distinct value of a set of values of an attribute of data. The method may further include implementing a state machine on the server to manage state transitions initiated by the one or more client machines operating on the data according to the workflow management policy.

Abstract: A distributed database server receives a recursive lock/search request, acquires a local lock, and propagates the recursive lock/search request to a peer database server. Specific implementations within a Lightweight Directory Access Protocol (“LDAP”) server are described, and applications that can benefit from the recursive locking and searching functionality are discussed.

Abstract: A distributed database server receives an operation request including a flag to cause recursive lock-and-propagate operation, acquires a local lock, tests the operation locally and propagates the recursive request to a peer database server. Specific implementations within a Lightweight Directory Access Protocol (“LDAP”) server are described.

Abstract: A method and apparatus for applying access control instructions to attributes. A request is received for permission to perform an operation on an attribute associated with an access control instruction. The access control instruction specifies an allowed type of channel for the operation. If a secure channel has been established with the requester, the permission to perform the action is granted.

Abstract: Information to link two attributes in a database is stored, and when one of the attributes is updated, a new value for the second attribute is computed and stored. Related systems and applications are also described.

Abstract: Virtual attribute logic adds virtual attributes to a Lightweight Directory Access Protocol (“LDAP”) response, and meta-virtual attribute logic adds additional virtual attributes to provide further information about the virtual attributes. For example, a Distinguished Name (“DN”) of an entry that provided a virtual attribute may be added by the meta-virtual attribute logic.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes retrieving a list of lightweight directory access protocol (LDAP) access control instructions (ACIs) for an LDAP entry, and storing the list in a cache of an LDAP server as an entry associated with the LDAP entry.

Abstract: Template entries are added to a Lightweight Directory Access Protocol (“LDAP”)-accessible database, containing attributes that affect new records added to the database, attributes returned in response to an LDAP query, and records identified through an LDAP search operation. Static and dynamic attributes are discussed.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving a request for at least one LDAP attribute value of an LDAP attribute, the LDAP attribute having a plurality of LDAP attribute values. The method may further include retrieving a first subset of the plurality of LDAP attribute values from an LDAP repository serially, and returning the first subset of the plurality of LDAP attribute values to a requester.

Abstract: A method and apparatus to prove user assertions. A client request to authenticate a user assertion pertaining to user personal data may be received. The requested authentication may be generated for the client, the authentication proving the user assertion without revealing other information about the user. The requested authentication may be sent to the client.

Abstract: A method and apparatus for secure information transfer using dedicated public key pairs for articles of information. A first public key pair may be generated for an article of information. The article of information may be combined with a first public key from the first public key pair to form an information packet. The information packet may be digitally signed with a second private key from a second private key pair.

Abstract: A method and apparatus for maintaining indices for a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving requests for data from a lightweight directory access protocol (LDAP) repository. The method further includes evaluating queries performed for the requests and generating an LDAP index based on an evaluated query.

Abstract: A method and apparatus for automatic index query optimization for a Lightweight directory Access Protocol (LDAP) system. Embodiments include a method for receiving a query for an LDAP repository. The method may further include reorganizing search terms in the query based on a uniqueness value of corresponding LDAP indexes to generate a modified query, and executing the modified query.

Abstract: A method and apparatus for retrieving data from a Lightweight Directory Access Protocol (LDAP) repository. In one embodiment, the method includes receiving a request for data in a lightweight directory access protocol (LDAP) directory. The method may further include checking any one or more of an LDAP cache and an LDAP index for an LDAP attribute pertaining to requested data, the checking comprising determining if a time-to-live for the LDAP attribute or the LDAP index has expired, and returning the data to the client.