Abstract: A method and apparatus for applying an application of a data service, such as X.500 and LDAP, to a relational database, a database design and use of the database to perform such directory services. Specifically addressed is the problem of achieving efficient searching of a directory service database coupled with effective input or output of data from the database. The disclosed method and apparatus, which provide end efficiency and data tolerance in the provision of a variety of database services, is based upon the concurrent storage in a database of both a normalised (syntax normalised) form and a raw (protocol encoded) form of the data. The raw form of data may be in ASN.1. A further feature of the disclosed method and apparatus concerns the transfer of data in and out of a database, where, in finding data in the database, a normalised form is used, and, in transferring data out of the database, a raw form is used.

Abstract: A self-service terminal comprising: application flow logic which collates information provided by a user of the terminal; configuration information associated with each of a plurality of individually-controllable layers, and a presentation component responsive to the application flow logic. The presentation component operates on the configuration information for each layer to simultaneously render the plurality of layers on a display as a single screen while continuing to operate independently on each layer being displayed. The configuration information may include both instructions and content, and the presentation component may use the instructions to access advanced graphical manipulation routines for operating on the content.

Abstract: A method of method and apparatus for authenticating an executable application program is described in which the application is installed in a system. Prior to providing access, for the executable application, to secure hardware or software a subordinate program verifies the authenticity of the executable application.

Abstract: A self-service terminal comprising a core unit (10) that includes a processor and one or more peripheral devices (14) operable to communicate with the core (10). Included in each of the core (10) and the peripheral devices (14) are means for encrypting messages (20, 22) using key based encryption, so that messages can be securely sent between them. The key based encryption uses a session key for encrypting messages and public/private key based encryption, such as RSA, for key management purposes. An initial session key is generated in the peripheral device in response to the detection of a pre-determined act or event. Once a suitable session key is created, it is encrypted using the public key of the public/private key pair and sent to the core (10), where it is decrypted using the private key to expose the session key. This session key is then used to encrypt/decrypt all messages sent between the core (10) and the peripheral device (14).

Abstract: A system implementing secure access to management information, the system (96) comprising: an open management service (64) including an open management application programming interface (92); a managed object (18,30,50,66) generating management information; and an object interface (68,74) for (i) receiving management information from the object, (ii) converting the received management information into a format accessible to the open management service, and (iii) providing the management information to the open management service (64) in response to a valid request from a client (80). The system further comprises an authorization component (74a) for verifying an access code (86) associated with the request to determine if the client (80) is authorized to issue the request.

Abstract: A directory services system, such as one providing a X.500 or LDAP directory service, having a design and a method of operation which facilitates queries in and out of the directory, table organisation/layout and clustering. In the arrangement of the directory service, tables are organized corresponding to their function, thereby permitting an arrangement based on service modeling and functional organisation that permits clustering. A preferred layout design incorporates principal, conceptual, logical and/or physical designs.

Abstract: A method and apparatus for applying an application of a database service, such as X.500 or LDAP, to a relational database, a database design and use of the database to perform such services. Specifically addressed is the problem of database searching, particularly search speed and complexity of search. The method and apparatus concern searching a directory service database, in which the scope of search area is initially prescribed and/or in which a filter is applied over the search area. Moreover, in dealing with an alias during a search, a unique set of areas is found which define areas of a search tree that need to be searched. A FLAG column is used to indicate if an alias points inside a subtree. The method and apparatus also enable single pass resolution in any one of a search, filter or subtree search of a directory service, the method and apparatus including the use of a path column to simultaneously apply an arbitrary filter over an arbitrary subtree.

Abstract: A method and apparatus for addressing problems associated with the implementation of directory services, such as X.500 and LDAP, in a SQL environment, particularly problems associated with interrogating database provided to implement directory services in the SQL environment. According to the disclosed method and apparatus, the system is based on the use of tables that may be arranged to have a plurality of columns, so that they support a variety of functions in order to implement directory services, such as X.500 and LDAP. In one aspect, the present invention provides a method of creating one or more SQL commands corresponding to a directory service. In another aspect, the present invention provides a many examples of tables and their function. Many examples of an implementation of directory services using SQL based technology are disclosed.

Abstract: A method and apparatus for implementing directory services, such as X.500 and LDAP in a SQL environment, and for providing a desired level of indexing, extensibility and scalability. In the directory service system, a plurality of objects are defined to be hierarchical, and the relationships among objects follow a tree structure where each object has a parent object and except for a root, each parent can have zero or more children. The database comprises at least one table having a plurality of rows and columns and stores a plurality of data items, each having a value, each being related to one of a plurality of data types and each having attributes defined by the directory.

Abstract: A method of processing a database service query that results in improved service query performance is provided. In one embodiment, the method includes receiving a service query that includes a filter having one or more filter items, expanding the filter, and applying at least one condition test to each filter item. An example of a test condition includes determining if each filter item includes a NOT connective and is either of first form or a second form of filter item. The first form may be a type only filter item and the second form may be a type and value filter item.

Abstract: Methods for arranging data in relational databases and for searching directory service databases and systems are provided. In particular, but not exclusively, systems and directories which implement or perform X.500 or LDAP services in a relational database are provided. The present application includes a database arrangement that stores data types in a table as components and searches the components for desired data entries.

Abstract: The present invention addresses the problem of implementing X.500 using an SQL product. The present application discloses an application of X.500 to a relational database, a database design and use of the database to perform X.500 services. Particularly, the disclosure relates to implementation using an RDBMS (Relational DataBase Management System). One invention disclosed resides around service modelling, the processing of arbitrary data using a fixed set of queries/services. Another invention resides in the implementation of a disk based model using relational queries to satisfy X.500 services and enables benefits of RDBMS to be exploited. Further, the invention provides an SQL based X.500 application that can perform at subsecond speed and is relatively unaffected by the size of database, DIT shape, type of data or complexity of service, including aliases.