Abstract: A software execution profiling method comprising: collecting, from a plurality of subsystems of a client machine, information including an event report corresponding to each of a plurality of events occurring in the plurality of subsystems, each event report specifying an event identifier and a cause identifier; responsive to determining that the cause identifier includes an empty field, determining time values in the information associated with the first event and a second which caused the first event; determining to indicate a causation relationship between the first event and the second event in view of the time value of the second event being within the defined period of the time value of the first event; and presenting via a graphical user interface (GUI) the events and an indicator of the causation relationship.

Abstract: A method and apparatus for providing safety feedback to web browsers. A web browser contacts a remote server that monitors web site safety and provides a universal resource locator (URL) for a web site the client is about to access. The web site safety or tracking server checks its database for reports of issues related to the URL and provides information on any such issues. The user of the web browser can then make an informed decision about whether to continue the access of the website associated with the URL. The user of the web browser can also send reports of unwanted activities by any website. This information is analyzed and added to the database maintained by the remote server.

Abstract: A method and apparatus for an identity card having improved security features. The identity card can have a two-dimensional bar code or similar encoding of data allowing for verification of the authenticity of the identity card. The two-dimensional bar code can store security data such as codes or image data that can be decoded and cross-checked against the visible user data to ensure that the card has not been improperly modified.

Abstract: A subject private key that has been encrypted with a session key and a subject public key are received. A storage session key is generated and the subject private key is encrypted with the storage session key. A storage key is retrieved and the storage session key is encrypted with the storage key. The subject private key encrypted with the storage session key and the encrypted storage session key are stored in a memory.

Abstract: An embodiment relates generally to a method of assigning roles to a token. The method includes determining a first role for a first participant on a token and providing exclusive access to a first section of the token for the first participant base on the first role. The method also includes determining a second role for a second participant on the token and providing exclusive access to a second section of the token for the second participant based on the second role.

Abstract: Improved Lightweight Directory Access Protocol (“LDAP”) server architectures using dedicated threads to respond to different classes of LDAP requests are described and claimed. Some servers classify an LDAP request from a client, then store the classified request with similarly-classified requests. One of the classified LDAP requests is selected and executed to prepare a corresponding LDAP response. Other arrangements are also described and claimed.

Abstract: Systems and methods for generating credentials are described. A subject private key that has been encrypted with a session key and a subject public key are received. A storage session key is generated and the subject private key is encrypted with the storage session key. A storage private key is retrieved and the storage session key is encrypted with the storage private key. The subject private key encrypted with the storage session key and the encrypted storage session key are stored in a memory.

Abstract: A method and apparatus for distributing certification statements. Digital certificates are stored in a plurality of entries in a repository. Certification statements that include revocation status information for the stored digital certificates are received and stored in corresponding entries of the repository. Upon receiving a client request for a digital certificate, the digital certificate and corresponding revocation status information is sent to the client.

Abstract: A method and apparatus for propagating certificate revocation information. A first query is received regarding a revocation status of a first digital certificate. One or more additional queries are received regarding revocation statuses of one or more additional digital certificates. A response to the first query and the one or more additional queries is generated, the response including the revocation status of the first digital certificate and the revocation statuses of the one or more additional digital certificates.

Abstract: Methods and software for distributing several data objects containing status information about security certificates, and a directory of the data objects, through a peer-to-peer data distribution network. Other methods and software for preparing a certificate status object containing validity information about a security certificate, and a reaffirmation object identifying the certificate status object, both to be transmitted to a requesting client after an expiration time contained in the certificate status object.

Abstract: Embodiments of the present invention provide a pre-compression encoding capability for encoding a CRL, such as an X.509 CRL, stored as a file, data structure or data object in a computer system having a certification authority (CA) and a security client prior to compression. An exemplary method provides for accessing the CRL contents and performing an encoding procedure.

Abstract: A computer command processor to prepare a data processing pipeline where an output of a first process is provided as an input of a second process, wherein the first process and the second process execute at different computer systems. Systems (and the processes that are to occur there) are identified by Uniform Resource Locators (“URLs”).

Abstract: A method and apparatus for sending a self-asserted certificate is described. A mail client of a sender is configured to generate a public and private key pair, to create a self-signed certificate, and to form an introduction message addressed to a recipient to enable use of the self-signed certificate prior to corresponding with the recipient. A mail client of a recipient is configured to display an indicator of a receipt of the introduction message from the sender. The indicator comprises a user interface query to the recipient to verify and accept the sender-signed certificate in response to receiving the introduction message from the sender.

Abstract: A method and system for using Unix commands with web services are described. The method includes reading at least one delimiter-separated string on a standard input, and preparing a request to a web service from the at least one delimiter-separated string, where the web service is specified by a command-line argument. The method further includes transmitting the request to the web service, and providing, to a standard output, a response of the web service to the request.

Abstract: In one embodiment, an apparatus and method for partitioning data on a smartcard dependent on an entered password are disclosed. In one embodiment, the method includes maintaining multiple containers in a smartcard, associating a different personal identification number (PIN) with each of the multiple containers, and accessing contents of a container when an associated PIN for the container is provided by a user of the smartcard. Other embodiments are also described.

Abstract: Method and apparatus for managing digital certificates are described herein. In one embodiment, an encryption certificate is extracted from an email received from an owner of the encryption certificate, where the encryption certificate being issued from a trusted party other than the owner. Then the encryption certificate is associated with an entry of a directory based on an identity (ID) of the owner, where the directory provides directory services to one or more email servers. Other methods and apparatuses are also described.

Abstract: Some embodiments of user interface annotations have been presented. In one embodiment, comments are retrieved from a database coupled to a client machine executing an application program, wherein subjects of the comments comprise at least one of a graphical user interface (GUI) of the application program and one or more user interface (UI) elements in the GUI. Then annotations of the comments are presented on the GUI.

Abstract: An apparatus and system for transforming a web page for display on a mobile device is described. In one embodiment, a graphical representation of a document object model associated with a URL is displayed. Selections of at least one element of the document object model are stored as a content filter. A request for a resource associated with the content filter is processed by extracting portions of the resource according to the content filter. The extracted portions are provided to a client.

Abstract: Alternative views for a selected distinguished name entry in current view are identified through subviews. Each subview corresponds to an attribute defined by a dynamic view object in a schema for a lightweight directory access protocol directory. The subviews are searched to find those that have entries that match the value of the selected distinguished name entry. In one aspect, the attribute is a virtual attribute.

Abstract: A method and apparatus for verifying authenticity of a digital signature for an attribute value. In one embodiment, the method includes receiving a message including an attribute value of an attribute from a Lightweight Directory Access Protocol (LDAP) repository entry and a digital signature, and verifying that the digital signature authenticates the attribute value.