Christopher A Lehman

US Patent:

7613701, Nov 3, 2009

Filed:

Dec 22, 2004

Appl. No.:

11/021689

Inventors:

Ting Zhao - Coral Springs FL, US
Kenneth L. Milsted - Boynton Beach FL, US
Kenneth Carlin Nelson - Hollister CA, US
Christopher T. Lehman - Delray Beach FL, US
Qing Lu - Coral Springs FL, US

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

G06F 7/00

US Classification:

707 9, 707 10, 707101, 707102, 713166, 713167, 713176

Abstract:

A computer-based method with multilevel hashing for lookup of a complex nested object (such as access control list) which has a plurality of nesting levels and each level has at least one element. Method stores representatives of a complex nested object in a data structure at locations determined by recursive multilevel hashing of the complex nested object elements. When needed, a match for an inputted complex nested object is determined by applying the same recursive multilevel hashing to the inputted complex nested object, as used during the storing of the complex nested object, and performing integer comparisons with hash values of the stored complex nested object.

US Patent:

62266187, May 1, 2001

Filed:

Aug 13, 1998

Appl. No.:

9/133519

Inventors:

Edgar Downs - Fort Lauderdale FL
George Gregory Gruse - Lighthouse Point FL
Marco M. Hurtado - Boca Raton FL
Christopher T. Lehman - Delray Beach FL
Kenneth Louis Milsted - Boynton Beach FL
Jeffrey B. Lotspiech - San Jose CA

Assignee:

International Business Machines Corporation - Armonk NY

International Classification:

H04L 900

US Classification:

705 1

Abstract:

Disclosed is a method and apparatus of securely providing data to a user's system. The data is encrypted so as to only be decryptable by a data decrypting key, the data decrypting key being encrypted using a first public key, and the encrypted data being accessible to the user's system, the method comprising the steps of: transferring the encrypted data decrypting key to a clearing house that possesses a first private key, which corresponds to the first public key; decrypting the data decrypting key using the first private key; re-encrypting the data decrypting key using a second public key; transferring the re-encrypted data decrypting key to the user's system, the user's system possessing a second private key, which corresponds to the second public key; and decrypting the re-encrypted data decrypting key using the second private key.