David W Boreham, 6091 Mountain Brook Rd, Livingston, MT 59047

6785686, Aug 31, 2004

May 29, 2001

09/867789

David Boreham - Livingston MT
Peter Rowley - Mountain View CA
Mark C. Smith - Saline MI

Sun Microsystems, Inc. - Santa Clara CA

G06F 1700

707102, 707100

Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Any client with appropriate access privileges can discover, identify and examine any role definition. A âmanagedâ role is one that can be configured to provide search results similar to those available with a static grouping mechanism, i. e. , to create a group entry that contains a list of members. Managed roles allow a user to create an explicit enumerated list of members. A managed role is a label stored with a directory entry.

6877026, Apr 5, 2005

Jun 8, 2001

09/877706

Mark C. Smith - Saline MI, US
David W. Boreham - Livingston MT, US
Gilles Bellaton - St. Martin d'Heres, FR
Robey Pointer - Mountain View CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F015/16

709203, 707 10, 709219

A method of bulk import in a directory server, including defining an extended operation on a server and a client, sending an extended operation request from the client to the server, performing the extended operation after receiving the extended operation request from the server, sending a response of the server back to the client specifying an object identifier of the extended operation and data specific to the extended operation; and performing a series of LDAP add operations framed by extended operations to import an entry into the directory server. A bulk import system for a directory server, including a processor, a memory, extended operations defined on a server and a client, and software instructions residing in memory executable on the processor for performing a series of LDAP add operations framed by extended operations to import an entry into the directory server.

7016893, Mar 21, 2006

May 29, 2001

09/867791

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 7/00
G06F 17/00
G06F 17/30
G06F 15/173
G06F 15/16

707 3, 707100, 707102, 709224, 709227

Class of Service (CoS) allows a user to share attributes between entries in a way that is transparent to an application. This is achieved by generating the values of the attributes by a CoS logic at the time of or immediately prior to the time the entry is transmitted to an application, rather than storing the values of the attributes with the attribute itself. In alternative embodiments, the attributes may be generated at a time well before the time the entry is transmitted to an application. A CoS includes a CoS Definition entry and a Template entry. These two entries interact to provide attribute values to target entries within their CoS “scope” based on the target entry's DN, presence or absence of the target entry's CoS attribute, the attribute value stored in the target entry's CoS Template, and other factors. The CoS Definition entry, which is stored as an LDAP subentry below the branch at which it is effective, identifies the type of CoS being used. The Template entry contains a list of attribute values that are shared.

7016907, Mar 21, 2006

May 29, 2001

09/867508

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US
Mark C. Smith - Saline MI, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 17/00
G06F 7/00
G06F 17/30

707101, 707102, 7071041, 707 3

Role is a comprehensive grouping mechanism used in a directory server. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Assigning entries to roles enables applications to locate the roles of a target entry, rather than select a group and browse the members list. By changing a role definition, a user can change an entire organization with ease. Any client with appropriate access privileges can discover, identify and examine any role definition. An enumerated role is one that contains a list of target entries as members. By simply searching for the membership of the enumerated role, a client application will obtain a list of all members that possess that enumerated role.

7020662, Mar 28, 2006

May 29, 2001

09/867595

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 7/00
G06F 17/00
G06F 17/30
G06F 15/177

7071041, 707101, 707100, 707 3, 709220

Class of Service (CoS) is a mechanism that allows a user to share attributes between directory entries in a way transparent to an application. A CoS scheme includes a CoS Definition entry and a CoS Template entry. These two entries interact to provide attribute values to target entries within their CoS “scope”. In Classic CoS, an attribute-value pair is matched with a target entry based on the target entry's DN. The CoS Definition entry, which is stored as an LDAP subentry below the branch at which it is effective, identifies the type of CoS being used. The Template entry contains a list of attribute values that are shared. Any change made to the template entry's attribute values is automatically applied to all entries that share the attribute.

7130839, Oct 31, 2006

May 29, 2001

09/867790

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US
Mark C. Smith - Saline MI, US

Sun Microsystems, Inc. - Santa Clara CA

G06F 17/30

707 3, 707 10

Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Assigning entries to roles enables applications to locate the roles of an entry, rather than select a group and browse the members list. Additionally, roles allow for support of generated attribute values, and directory server-performed membership verification for clients. By changing a role definition, a user can change an entire organization with ease. Any client with appropriate access privileges can discover, identify and examine any role definition.

7873614, Jan 18, 2011

Jul 12, 2004

10/889451

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US
Mark C. Smith - Saline MI, US

Oracle America, Inc. - Redwood City CA

G06F 7/00

707705, 709217

Role is a comprehensive grouping mechanism. In a client-server directory system, roles transfer some of the complexity to the directory server. A role is defined by its role definition entry. Any client with appropriate access privileges can discover, identify and examine any role definition. A “managed” role is one that can be configured to provide search results similar to those available with a static grouping mechanism, i. e. , to create a group entry that contains a list of members. Managed roles allow a user to create an explicit enumerated list of members. A managed role is a label stored with a directory entry.

2003005, Mar 20, 2003

May 29, 2001

09/867594

David Boreham - Livingston MT, US
Peter Rowley - Mountain View CA, US

G06F007/00

709/220000

Class of Service (CoS) is a mechanism that allows sharing attributes between directory entries in a way transparent to an application. An indirect CoS identifies a template entry using the value of one of the target entry's attributes. In Indirect CoS, template entries are not defined within the CoS Scheme along with the CoS Definition entry. A first target entry may indirectly use a second target entry as a template entry and take on the second target entry's attribute-value pairs. It should be noted, however, that the first target entry's CoS specifier attribute must contain the DN of an existing and valid second target entry. Thus, in indirect CoS, a DN-valued attribute in the first target entry points to a temporary template entry, which is the second target entry's attribute-value set. The value in the attribute-value pair, which represents the CoS specifier must be a DN and must point to a valid entry.