Controlling access to electronically provided data or services

    公开(公告)号:GB2329497A

    公开(公告)日:1999-03-24

    申请号:GB9719874

    申请日:1997-09-19

    Applicant: IBM

    Abstract: The security of stored data and applications is improved by an access control system and method in which user keys for accessing the stored data/services (which keys are provided to users) are representative of the user's level of authority, such that there is no need to maintain a separate lookup table of user authority levels. This removes a potential security exposure from the system. The user keys are advantageously hierarchical, including data for generating a plurality of different access keys for different access levels. The access keys may be decryption keys for encrypted data or application programs. The invention is applicable to SmartCard systems.

    Smartcard transaction processing
    23.
    发明专利

    公开(公告)号:GB2328042A

    公开(公告)日:1999-02-10

    申请号:GB9715744

    申请日:1997-07-26

    Applicant: IBM

    Abstract: A method of executing a transaction between a smartcard and an external terminal adapted to access related data comprises determining from the data stored on the smartcard and the related data whether the transaction can be executed validly; if so, executing the transaction and in the event of the smartcard or the external terminal failing to execute the transaction, restoring 108 the smartcard data and the related data to their pre-transaction states. The smartcard may use a Java environment in which, before the determining steps are carried out, a stream of references to objects is created 100 which update 102 data in the transaction and when the transaction is complete the references are removed. A smartcard is also provided including means to determine whether a transaction can be validly executed and commit means to execute the transaction, together with a transaction processing system including such a smartcard and a terminal.

    Administration of a messaging system

    公开(公告)号:GB2392745B

    公开(公告)日:2005-09-28

    申请号:GB0220740

    申请日:2002-09-06

    Applicant: IBM

    Abstract: A method for administration in an object-oriented data processing environment is provided, for use in a distributed messaging system comprising a local computer system, a remote computer system having a remote queue object to be administered and a network. A query object is sent to the remote queue object in order to obtain a first copy of the remote queue object. Once the first copy is received, a second copy of the remote queue object is made at the local computer system and an administrator uses this second copy to make one or more updates. The updates and the first copy are then sent to the remote queue object. The remote queue object in its current state is compared to the first copy, in order to determine whether they match. If a match occurs, the administrator's updates are processed and the remote queue object is replaced with the updated version.

    Method and apparatus for data transfer across a network

    公开(公告)号:GB2378270B

    公开(公告)日:2005-04-20

    申请号:GB0118470

    申请日:2001-07-30

    Applicant: IBM

    Abstract: Requests for retrieval of data items from another data processing apparatus include embedded objects having executable class functions for performing operations at the target data processing apparatus. This has the advantages of the request implicitly sending data as well as requesting data and allows the request to perform a test on data within an object (such as a comparison with parameters of the request to determine whether the request may be satisfied). Objects within the request may be embedded within each other with different encryption and compression applied to the different objects. As well as achieving communication efficiencies, the ability to selectively encrypt components of a request may be used to provide greater security. For example, a store may be able to interpret the request, while credit details may be separately encrypted such that only a bank may decrypt that subcomponent of the request.

    Enabling conformance to legislative requirements for mobile devices

    公开(公告)号:CZ20013479A3

    公开(公告)日:2003-12-17

    申请号:CZ20013479

    申请日:2000-03-24

    Applicant: IBM

    Abstract: Provided are a method and a mechanism for dynamically controlling the performance of communication-related operations of a mobile device in accordance with legislative requirements of the particular location of the mobile device and the location of the computing device with which it is to communicate, and also in accordance with communication requirements of application programs at either end of the communication link. A first use of the invention is for ensuring conformance of a mobile device's communications to the cryptographic requirements of different countries, even when the device crosses a country boundary during communication.

    Camera system for three dimentional images and video

    公开(公告)号:GB2343320B

    公开(公告)日:2003-03-26

    申请号:GB9823760

    申请日:1998-10-31

    Applicant: IBM

    Abstract: A camera system including a plurality of image capture devices and supporting output of data from data storage arrays of each image capture device in a segment-by-segment manner, with output lines arranged in an interleaved manner so that interleaving is automatically achieved without complex image processing. The interleaved image or video output of such a camera system will appear as a three dimensional image when viewed through a screen of lenticular lenses.

    Smartcard transaction processing
    30.
    发明专利

    公开(公告)号:GB2328042B

    公开(公告)日:2002-10-09

    申请号:GB9715744

    申请日:1997-07-26

    Applicant: IBM

    Abstract: A method of executing a transaction on a smartcard of the type including a processor, a memory for storing a system program, an application programs and for storing data and an interface enabling communication with an external processor in a local terminal adapted to access related data is disclosed. The method comprises the steps of: determining from the data stored on the smartcard in a pre-transaction state if the transaction can be executed validly by the smartcard (102); determining from the related data stored in a pre-transaction state and accessible by said external processor if the transaction can be executed validly by the external processor (102); in response to said determining steps being affirmative, executing said transaction on said smartcard and by said external processor (105); and in response to said smartcard or said external processor failing to execute said transaction, restoring said data and said related data to the or each pre-transaction state (108).

Patent Agency Ranking