Match Document Document Title
8185933 Local caching of endpoint security information  
In general, the principles of this invention are directed to techniques of locally caching endpoint security information. In particular, a local access module caches endpoint security information...
8185959 Digital rights management of captured content based on capture associated locations  
When captured content is detected, the captured content is analyzed to determine whether any portion of the content is subject to digital rights management protection specified for content...
8185954 Resisting the spread of unwanted code and data  
A method or system of receiving an electronic file containing content data in a predetermined data format, the method comprising the steps of: receiving the electronic file, determining the data...
8185735 System and method for lost data destruction of electronic data stored on portable electronic devices  
A data security system and method protects stored data from unauthorized access. According to one aspect of the invention, a client computing device communicates periodically with a server. If...
8185931 Method and system for preserving privacy related to networked media consumption activities  
A method and system for preserving privacy related to networked media consumption activity including: Source privacy zones are defined and associated with privacy standards. Privacy standards...
8185935 Method and apparatus for dynamic home address assignment by home agent in multiple network interworking  
A method and apparatus for dynamic home address assignment by a home agent in multiple network interworking. The invention provides a method and apparatus send a key authorization request from a...
8185930 Adjusting filter or classification control settings  
Methods and systems for adjusting control settings associated with filtering or classifying communications to a computer or a network. The adjustment of the control settings can include adjustment...
8185932 System and method for user-centric authorization to access user-specific information  
In a network computing environment, a user-centric system and method for controlling access to user-specific information maintained in association with a web-services service. When a web-services...
8181221 Method and system for masking data  
An approach is provided for masking data. A determination is made whether an action initiated by an authenticated user corresponds to one of a plurality of policies stored in a policy store,...
8181016 Applications access re-certification system  
An applications access re-certification system is disclosed. The system is used for approving and re-certifying a user's access rights to applications stored or existing in an institution's...
8181253 System and method for reducing security risk in computer network  
Disclosed are systems, methods and computer program products for reducing security risk in a computer network. The system includes an administration server that collects system usage, user profile...
8181219 Access authorization having embedded policies  
A facility for receiving an embedded policy is provided. The facility checks an application program image for the presence of an embedded policy. If an embedded policy is detected, the facility...
8181220 Method and apparatus for digital rights management policies  
Method and apparatus are described wherein, in one example embodiment, there is provided one or more policy templates that may define a set of policy permissions or other attributes that may be...
8181257 Method to allow role based selective document access between domains  
An improved solution for allowing role based selective access to a document between a plurality of domains is provided. In an embodiment of the invention, a method for allowing selective access to...
8181222 Locally adaptable central security management in a heterogeneous network environment  
A system and method for defining and enforcing a security policy. Security mechanism application specific information for each security mechanism is encapsulated as a key and exported to a semantic...
8176562 Privacy protection during remote administration  
A remote access manager protects the privacy of identified local file system content while a local computer is being accessed by a remote administrator. A local user inputs a privacy policy which...
8176525 Method and system for trusted contextual communications  
This invention provides a method, system and apparatus for allowing media context sensitive SIP signaling exchange (such as voice) and call establishment while denying or challenging any other...
8176526 Configurable redundant security device failover  
Techniques are described for managing failover in redundant network devices. In particular, each device in a set of redundant network devices includes redundant processing modules. Each module...
8176249 Methods for embedding session secrets, within application instances  
Method for embedding a session secret, within an application instance, comprising the steps of generating an ephemeral session secret by a master application. Embedding, by master application,...
8176019 Extending the sparcle privacy policy workbench methods to other policy domains  
A method and system enable a user to develop domain-specific policy workbench. Domains may include, but are not limited to security, autonomic computing, workload management and systems management....
8176328 Authentication of access points in wireless local area networks  
A method for authenticating an operator of an AP includes: registering the operator's identity with a CA, by providing the operator's identification information and public key; creating a...
8176561 Assessing network security risk using best practices  
A method and appertaining system for implementing the method are provided that utilize predefined Best Practice Templates that are rules/criteria for assessing the security of a particular network...
8170957 System and method for managing digital interactions  
A system for managing digital interactions comprising an identity module for creating an identity, wherein the identity includes a unique identifier associated with a first party and a plurality of...
8170956 Systems and methods for electronically managing content  
Systems and methods are provided for electronically managing content. In one embodiment, information identifying content items found on a page is received from a client system through code embedded...
8171535 Dynamic web service policy broadcasting/enforcement for applications  
A system enables a client coupled to a server via a network to exchange security policy information across the network. The client is configured to determine security policy associated with the...
8171522 Systems and processes for managing policy change in a distributed enterprise  
A method for managing changes to policies in an enterprise includes receiving a systems policy change request to change a systems policy that implements a published enterprise policy, determining...
8171287 Access control system for information services based on a hardware and software signature of a requesting device  
A system and method for the authorization of access to a service by a computational device or devices. A software agent generates a digital signature for the device each time it attempts to access...
8171521 System and method for managing network by value-based estimation  
A system and method for managing a network by value-based estimation is provided. A network device requesting communication is defined as an active point and a network device receiving a request...
8171554 System that provides early detection, alert, and response to electronic threats  
The invention is a computer system that provides early detection alert and response to electronic threats (eThreats) in large wide area networks, e.g. the network of an Internet Services Provider...
8166304 Support for multiple security policies on a unified authentication architecture  
A method, computer program product, and data processing system are disclosed for ensuring that applications executed in the data processing system originate only from trusted sources are disclosed....
8166516 Determining effective policy  
Aspects of the subject matter described herein relate to determining effective policy when more than one policy may be associated with an entity. In aspects, bindings associate policies with target...
8166532 Decentralized access control framework  
A functional architecture is provided for decentralizing the authorization function of an access control system that incorporates user carried access devices, such as smart cards, and door...
8166533 Method for providing media communication across firewalls  
The present invention supports a method for transmitting information packets across network firewalls. A trusted entity is provisioned with an address designation for a pinhole through the firewall...
8165286 Combination white box/black box cryptographic processes and apparatus  
Method and apparatus for increasing security of a cryptographic algorithm such as deciphering, enciphering, or a digital signature. A cryptographic algorithm and a key are provided such that a...
8166515 Group policy for unique class identifier devices  
A system is disclosed for centralized management of access permissions to unique class identifier devices on client terminals using a group policy framework. The system includes a first aspect...
8161522 Method and apparatus for using expiration information to improve confidential data leakage prevention  
A method and apparatus for using expiration information to improve confidential data leakage prevention is described. In one embodiment, a method for protecting confidential data from disclosure...
8160247 Providing local storage service to applications that run in an application execution environment  
Methods, systems, and apparatus, including medium-encoded computer program products, for providing local storage service to applications that run in an application execution environment. In one...
8161560 Extensible framework for system security state reporting and remediation  
A security health reporting system provides an application program interface (API) for use by independent software vendors (ISVs) to extend the security health reporting capabilities of the...
8161521 Controlling network access by applying super security policies  
A device may monitor a security policy that governs a user access to a zone in a private network, propagate a change in status of the security policy to one or more devices that coordinate with...
8161523 Method and apparatus for network access control (NAC) in roaming services  
The present invention discloses a method and apparatus for network access control (NAC) in roaming services. In embodiments of the present invention, roaming quarantine access policies and roaming...
8161520 Methods and systems for securing a system in an adaptive computer environment  
An automated method for securing a target system is provided. In this method, a request to change an entity in the target system is detected. The target system has an existing security profile or...
8156538 Distribution of information protection policies to client machines  
One embodiment includes a method which may be practiced in a computing environment where resources are distributed. The method includes acts for obtaining policy information defining restrictions...
8156536 Establishing secure communication sessions in a communication network  
In one embodiment, a method for establishing a session between a first party and a second party in a communication network comprises issuing a request to establish the session with the second...
8156537 Method and system for access control using resource filters  
The present description refers in particular to a method, a system, and a computer program product for access control using resource filters for a strict separation of application and security...
8156566 Associating code to a target through code inspection  
Code is associated to a target based on an inspection of the code. A target may be a device or a user. A number of code components may be inspected at one time and then transferred or otherwise...
8150377 System and method of maintaining communications policy settings in a wireless network  
The present invention provides a system and method of modifying policy settings in a network having a plurality of subscriber devices. An embodiment includes a plurality of base stations, each...
8149826 Method and system for profiling and learning application networking behavior  
In general, the invention relates to a method for classifying an application. The method includes receiving, at a kernel, a plurality of packets from the application, wherein the application is...
8151319 Authentication of devices in a wireless network  
A method for authentication of devices (D1, D2, D3) in a wireless network, wherein—a device (D1, D2, D3) periodically switches its mode from a read mode, in which it is able to receive a...
8150727 Content and advertising material superdistribution  
Embodiments provide content and advertising material superdistribution. In one embodiment, a method of distributing content and advertising material may be provided. The method may include:...
8151332 Digital identity management  
One aspect relates to a process and associated device for managing digital ID lifecycles for application programs, and abstracting application programs for multiple types of credentials through a...