-
公开(公告)号:CA2069710C
公开(公告)日:1996-08-20
申请号:CA2069710
申请日:1992-05-27
Applicant: IBM
Inventor: BIRD RAYMOND F , BRITTON KATHRYN H , CHUNG TEIN-YAW D , EDWARDS ALLAN K , MATHEW JOHNY , POZEFSKY DIANE P , SARKAR SOUMITRA , TURNER ROGER D , CHUNG WINSTON W-K , YEUNG YUE T , GRAY JAMES P , DYKEMAN HAROLD D , DOERINGER WILLIBALD A , AUERBACH JOSHUA S , WILSON JOHN H
Abstract: A Transport Layer Protocol Boundary (TLPB) architecture is described which will permit an application program to run over a non-native transport protocol without first generating a protocol compensation package tailored to the transport protocols assumed by the program's application programming interface and by the available transport provider. All transport functions required by the program are converted to standardized or TLPB representations. When a connection between the first application program and a second remote application is requested, the individual required TLPB transport functions are compared to corresponding functions supported by the transport provider. Compensations are invoked only where there is a mismatch. The node on which the remote application program runs is informed of the compensations so that necessary de-compensation operations can be performed before the data is delivered to the remote application program.
-
公开(公告)号:CA2069710A1
公开(公告)日:1993-01-18
申请号:CA2069710
申请日:1992-05-27
Applicant: IBM
Inventor: BIRD RAYMOND F , BRITTON KATHRYN H , CHUNG TEIN-YAW D , EDWARDS ALLAN K , MATHEW JOHNY , POZEFSKY DIANE P , SARKAR SOUMITRA , TURNER ROGER D , CHUNG WINSTON W , YEUNG YUE T , GRAY JAMES P , DYKEMAN HAROLD D , DOERINGER WILLIBALD A , AUERBACH JOSHUA S , WILSON JOHN H
Abstract: A Transport Layer Protocol Boundary (TLPB) architecture is described which will permit an application program to run over a non-native transport protocol without first generating a protocol compensation package tailored to the transport protocols assumed by the program's application programming interface and by the available transport provider. All transport functions required by the program are converted to standardized or TLPB representations. When a connection between the first application program and a second remote application is requested, the individual required TLPB transport functions are compared to corresponding functions supported by the transport provider. Compensations are invoked only where there is a mismatch. The node on which the remote application program runs is informed of the compensations so that necessary decompensation operations can be performed before the data is delivered to the remote application program.
-
公开(公告)号:CA2130412A1
公开(公告)日:1995-07-01
申请号:CA2130412
申请日:1994-08-18
Applicant: IBM
Inventor: BRITTON KATHRYN H , DOERINGER WILLIBALD , DYKEMAN HAROLD D , CHUNG TEIN-YAW , EDWARDS ALLEN K , MATHEW JOHNY , POZEFSKY DIANE P , SARKAR SOUMITRA , TURNER ROGER D
Abstract: A multiprotocol transport network (MPTN) gateway provides transparent interconnection of two or more SPTNs (12, 14, 16, 18) running different transport layer protocols to form an integrated heterogeneous MPTN. The MPTN gateway of the present invention has no dependencies on the particular transport protocols running on the SPTNs being interconnected as it utilizes a common transport provider (a Gateway Services Protocol Boundary (GSPB)) (38) between the SPTN transport protocols and the gateway components. The MPTN gateway supports connections between end systems across multiple intermediate networks. The MPTN gateway provides automatic routing based on dynamic participation in the routing protocols of the interconnected SPTNs so that any number of gateways may be interconnected and in any topology desired. As the MPTN gateway has a general architecture and acquires routing information automatically, it supports not only other MPTN nodes and gateways but also non-MPTN nodes and gateways.
-
4.
公开(公告)号:CA2105351A1
公开(公告)日:1994-06-15
申请号:CA2105351
申请日:1993-09-01
Applicant: IBM
Inventor: DERBY JEFFREY H , DOERINGER WILLIBALD A , DYKEMAN HAROLD D , LI LIANG , SANDICK HALDON J , VU KEN V
Abstract: A system for interconnecting widely separated local area networks (LANs) by means of a wide area network (WAN) utilizes network level facilities to establish a connection through the wide area network and to create connection table entries at the WAN access point which allow subsequent data frames to be transmitted through the wide area network without such network level operations. More particularly, the various LANs are combined into search groups, represented by address prefixes, to which LAN-initiated connection requests can be broadcast and which can respond so as to establish the data path connections. This system has the connection flexibility of a prior art router and, at the same time, the low overhead of a prior art bridge.
-
公开(公告)号:GB2488705B
公开(公告)日:2016-03-09
申请号:GB201209974
申请日:2010-11-22
Applicant: IBM
Inventor: BUHLER PETER , DYKEMAN HAROLD D , EIRICH THOMAS , KAISERSWERTH MATTHIAS , KRAMP THORSTEN
-
公开(公告)号:GB2498139A
公开(公告)日:2013-07-03
申请号:GB201306126
申请日:2011-10-18
Applicant: IBM
Inventor: BAENTSCH MICHAEL , DYKEMAN HAROLD D , HERMANN RETO , KRAMP THORSTEN , KYPER-HAMMOND MICHAEL PETER , OSBORNE CHARLES , WEIGOLD THOMAS D
Abstract: The invention is notably directed to a method, a secure device, a system and a computer program product for securely managing user access to a file system. The method comprises the steps of: - providing (S100) a secure device (10), the latter protected by design against malicious software or malware and adapted to establish a connection to a server (40 through a telecommunication network and this, preferably via a host (30) connected to the server (40); - establishing (S300) a connection (91) between the secure device and the server (40); - receiving (S350) at the secure device, through the established connection (91), data pertaining to a file system identifying files which are at least partly stored outside the secure device; - exposing (S600) at the secure device the file system to a user, based on the data received from the server, the file system navigable by the user.
-
公开(公告)号:DE112010004580T5
公开(公告)日:2012-11-29
申请号:DE112010004580
申请日:2010-11-22
Applicant: IBM
Inventor: DYKEMAN HAROLD D , KAISERSWERTH MATTHIAS , KRAMP THORSTEN , BUHLER PETER , EIRICH THOMAS
Abstract: Die Erfindung bezieht sich insbesondere auf ein Verfahren für eine sichere PIN-Verwaltung einer für Benutzer vertrauenswürdigen Einheit (10), die über ein Datenverarbeitungsmittel (15) verfügt, das mit einem dauerhaften Speicher (15'), einem nicht dauerhaften Speicher (15') und Schnittstellen (17, 18, 20) für das Verbinden oder Zusammenwirken mit einem Benutzer (1), einer Speicherkarte (16) wie z. B. einer Smartcard und einer Datenstation (30) verbunden ist, wobei das Verfahren die folgenden Schritte umfasst: Bereitstellen der mit einer Speicherkarte (16) verbundenen Einheit; Empfangen in der Einheit: eine externe PIN und eine Karten-PIN, wobei letztere in der Lage ist, die Speicherkarte zu entsperren; Erzeugen und Speichern eines Schlüssels in dem dauerhaften Speicher über das Datenverarbeitungsmittel und aus den empfangenen PINs, so dass die Karten-PIN anhand einer Funktion, die in dem dauerhaften Speicher gespeichert ist, berechnet werden kann, wobei die externe PIN und der Schlüssel als Argument verwendet werden; Empfangen einer Benutzereingabe der externen PIN in der Datenstation und Übertragen der externen PIN an die Einheit; Anweisen des Datenverarbeitungsmittels, die Karten-PIN unter Verwendung der gespeicherten Funktion zu berechnen; und Verwenden der berechneten Karten-PIN, um die Speicherkarte zu entsperren.
-
公开(公告)号:GB2488705A
公开(公告)日:2012-09-05
申请号:GB201209974
申请日:2010-11-22
Applicant: IBM
Inventor: BUHLER PETER , DYKEMAN HAROLD D , EIRICH THOMAS , KAISERSWERTH MATTHIAS , KRAMP THORSTEN
Abstract: The invention is notably directed to a method for secure PIN management of a user trusted device (10) having computing means (15) coupled to a persistent memory (15"), a non-persistent memory (15') and interfaces (17, 18, 20) for coupling to or/interacting with a user (1), a memory card (16) and a terminal (30), the method comprising the steps of: providing the device coupled to a memory card (16); receiving at the device: an external PIN and a card PIN, the latter capable of unlocking the memory card; generating and storing a key on the persistent memory, via the computing means and from the PINs received, such that the card PIN can be computed via a function stored on the persistent memory, taking the external PIN and the key as argument; receiving, at the terminal, user input of the external PIN and communicating the external PIN to the device; instructing the computing means to compute the card PIN using the function as stored; and using the computed card PIN to unlock the memory card.
-
公开(公告)号:CA2130412C
公开(公告)日:1998-01-20
申请号:CA2130412
申请日:1994-08-18
Applicant: IBM
Inventor: MATHEW JOHNY , CHUNG TEIN-YAW , SARKAR SOUMITRA , TURNER ROGER D , EDWARDS ALLAN K , DYKEMAN HAROLD D , DOERINGER WILLIBALD , POZEFSKY DIANE P , BRITTON KATHRYN H
Abstract: A multiprotocol transport network (MPTN) gateway provides transparent interconnection of two or more SPTNs running different transport layer protocols to form an integrated heterogeneous MPTN. The MPTN gateway of the present invention has no dependencies on the particular transport protocols running on the SPTNs being interconnected as it utilizes a common transport provider (a GatewayServices Protocol Boundary (GSPB)) between the SPTN transport protocols and the gateway components . The MPTN gateway supports connections between end systems across multiple intermediate networks. The MPTN gateway provides automatic routing based on dynamic participation in the routing protocols of the interconnected SPTNs so that any number of gateways may be interconnected and in any topology desired. As the MPTN gateway has a general architecture and acquires routing information automatically, it supports not only other MPTN nodes and gateways but also non-MPTN nodes and gateways.
-
-
-
-
-
-
-
-