A single secure sign-on gives a user access to authorized Web resources, based on the user's role in the organization that controls the Web resources. The information resources are stored on a protected Web server. A user of a client or browser logs in to the system. A runtime module on the protected server receives the login request and intercepts all other request by the client to use a resource. The runtime module connects to an access server that can determine whether a particular user is authentic and which resources the user is authorized to access. User information is associated with roles and functional groups of an organization to which the user belongs; the roles are associated with access privileges. The access server connects to a registry server that stores information about users, roles, functional groups, resources, and associations among them. The access server and registry server exchange encrypted information that authorized the user to use the resource. The user is presented with a customized Web page showing only those resources that the user may access. Thereafter, the access server can resolve requests to use other resources without contacting the registry server. The registry server controls a flexible, extensible, additive data model stored in a database that describes the user, the resources, roles of the user, and functional groups in the enterprise that are associated with the user.

Role-based navigation of information resources

A system and method of serverless peer-to-peer group management and maintenance is presented. Group formation and discovery of private, public, and enumerated groups are provided, as is a method of joining such a peer-to-peer group. Group information management provided by the present invention ensures that each node maintains a current database from the initial joining of the group through the run phase of membership. Group graph maintenance utilizes a group signature to ensure that partitions in a graph may be detected and repaired. The utility of connections within the graph are also monitored so that non-productive connections may be dropped to increase the efficiency of the group. The diameter of the graph is also monitored and adjusted to ensure rapid information transfer throughout the group. A disconnect procedure is used to maintain the graph integrity and prevent partitions resulting from the departure of a group member.

Peer-to-peer group management and method for maintaining peer-to-peer graphs

A method for provisioning users with resources is disclosed. The method includes the steps of establishing a set of attributes, organizational information, and user roles, and defining a plurality of resource provisioning policies based on selected attributes and user roles. The method also includes the steps of receiving attribute information, organizational information, and user role information for a particular user or resource, determining which resource access policies are applicable to the user based on the received user role information and attribute information, and provisioning the user with resources based on the applicable resource access policies. The resources to be provisioned include “hard” resources as well as “soft” resources. “Soft” resources may include e-mail and voice mail accounts, application programs, databases, files, folders, the Internet, Web pages, organizational Intranets, messages to third parties, digital certificates , the capability to purchase products over the Internet, the ability to order a corporate credit card, access to financial services providers, and the like. In addition, users may be provisioned with “hard” resources such as telephones, computers, cellular telephones, pagers, personal digital assistants, desks, chairs, file cabinets, other physical components, and the like. In addition, a user may be provisioned with resource bundles, which a resources that are comprised of other resources.

System and method for provisioning resources to users based on policies, roles, organizational information, and attributes

By doping an organic compound functioning as an electron donor (hereinafter referred to as donor molecules) into an organic compound layer contacting a cathode, donor levels can be formed between respective LUMO (lowest unoccupied molecular orbital) levels between the cathode and the organic compound layer, and therefore electrons can be injected from the cathode, and transmission of the injected electrons can be performed with good efficiency. Further, there are no problems such as excessive energy loss, deterioration of the organic compound layer itself, and the like accompanying electron movement, and therefore an increase in the electron injecting characteristics and a decrease in the driver voltage can both be achieved without depending on the work function of the cathode material.

Light Emitting Device

A serverless name resolution protocol ensures convergence despite the size of the network, without requiring an ever-increasing cache and with a reasonable numbers of hops. This convergence is ensured through a multi-level cache and a proactive cache initialization strategy. The multi-level cache is built based on a circular number space. Each level contains information from different levels of slivers of the circular space. A mechanism is included to add a level to the multi-level cache when the node determines that the last level is full. A peer-to-peer name resolution protocol (PNRP) includes a mechanism to allow resolution of names which are mapped onto the circular number space through a hash function. Further, the PNRP may also operate with the domain name system by providing each node with an identification consisting of a domain name service (DNS) component and a unique number.

Peer-to-peer name resolution protocol (PNRP) and multilevel cache for use therewith

A system of distributed group management for generating authentication information relating to a group to which users belong at a high speed on a client side and, at the same time, wherein a server side can verify this at a high speed. This system provides a group certificate issuing apparatus for issuing a group certificate on a client side based on original group information including the name of the group to which the users belong and a group certificate verification unit for verifying a legitimacy of the certificate transmitted from the client side in a server. Here, the group certificate issuing apparatus adds an issuance side processed value obtained by processing the information of the original group information by a cryptographic function to this original group information to obtain a group certificate, and the group certificate verification unit processes part of information included in the received certificate by an identical cryptographic function to obtain a verification side processed value and performs an authentication by confirming that the issuance side processed value and the verification side processed value coincide.

System and method for distributed group management

A method of generating access-control lists executable by a system and derived from access-control rules supplied for insuring security of an operation system is presented. The method includes the steps of inputting access-manager-type-group information, access-target-type-group information, and organizational-structure information, inputting access-control rules each comprised of an access-manager type, an access-target type, and an action in order to represent security guidelines of the system, inputting constraint conditions relating to the organizational structure of the system, extracting access managers and access targets from the access-manager-type-group information and the access-target-type-group information, respectively, with respect to the access-manager type and the access-target type included in each of the access-control rules, checking the constraint conditions with regard to all the combinations between the extracted access managers and the extracted access targets, and generating access-control lists comprised of such an access manager, an access target, and an action as to satisfy the constraint conditions.

Method and device for generating access-control lists

A level shift IC (3b) of a power supply interrupting part (3) interrupts power supply to a smoothing capacitor (4) when an interruption signal (Sa) is inputted for a time (T) from a timer circuit (8) while a discharge lamp (7) is lighted. While the interruption signal (Sa) is being inputted, a comparator (10) detects that a detection signal (Sb) of a capacitor voltage is reduced to be lower than a reference voltage (Vr1). Then, the end of a lifetime of the smoothing capacitor (4) is notified and a main control circuit (6) suppresses output of an inverter main circuit (5).

Discharge Lamp Lighting Device, and Lighting Equipment and Lighting System Using the Device

A system manages a layered network including an upper layer and a lower layer. In this system, a fault or degraded performance on a lower layer line, which is a connection line in a lower layer, is detected as an event. An upper layer line, which is a connection line in an upper layer affected by the detected event, is extracted. Then, a control is conducted for the extracted upper layer line.

System for managing layered network

A primer composition for a fluorinated elastomer or a fluorinated gel, said primer composition comprising: 100 parts by weight of (a) a linear perfluoro polyether compound having at least two alkenyl groups per molecule, a perfluoro polyether backbone having repeating units represented by the formula, —CaF2aO—, wherein a is an integer of from 1 to 6, and a weight average molecular weight of from 5,000 to 100,000, (b) an organosiloxane compound having one or more fluorine atom and at least two SiH bonds per molecule, in such an amount that a molar ratio of the SiH bond in the organosiloxane compound to the alkenyl group in Component (a) ranges from 0.8 to 5.0, a catalytic amount of (c) a hydrosilylation catalyst, 5 to 100 parts by weight of (d) an organosiloxane compound having, per molecule, at least one SiH bond and at least one epoxy group and/or trialkoxysilyl group bonded to a silicon atom of said organosiloxane via an organic group which may have an oxygen atom, and 100 to 10000 parts by weight, per total 100 parts by weight of said components (a), (b), (c) and (d), of (e) an organic solvent having a fluorine atom and a boiling point of not higher than 150° C. at atmospheric pressure.

Kenichi Fukuda

Papers

System and method for distributed group management

Method and device for generating access-control lists

Discharge Lamp Lighting Device, and Lighting Equipment and Lighting System Using the Device

System for managing layered network

Primer composition for a fluorinated elastomer or a fluorinated gel