Methods and systems for providing data objects on a token

• US 8,180,741 B2
• Filed: 06/06/2006
• Issued: 05/15/2012
• Est. Priority Date: 06/06/2006
• Status: Active Grant

• Current Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Original Assignee: Red Hat, Inc. (International Business Machines Corporation)
• Inventors: Relyea, Robert
• Primary Examiner(s): Lovel, Kimberly
• Assistant Examiner(s): Uddin, Mohammed R
• Application Number:
  US11/447,180
• Publication Number:
  US 20070282881A1
• Time in Patent Office: 2,170 Days
• Field of Search: 707/101, 707/102, 707/609, 707/693, 707/999.101, 726/9
• US Class Current: 707/693
• CPC Class Codes: H03M 7/30 Compression speech analysis-synthesis for redundancy reduction G10L19/00; for image communication H04N; Expansion; Suppression of unnecessary data, e.g. redundancy reduction

Abstract

A computer system, method and/or computer-readable medium provide independent data objects to a token in compressed form. The independent data objects are representative of security information associated with the token. The system includes an interface operable to communicate with a token, and a processor cooperatively operable with the interface. The processor is configured to determine a set of independent data objects that are associated with the token, and to aggregate the set of independent data objects associated with the token into a group. Also, the processor is configured for compressing the group into a unit of contiguous data, and writing the unit of contiguous data to the token via the interface.

Claims

1. A computer system, comprising:

an interface operable to communicate with a token device and to provide independent data objects to the token device in compressed form, wherein the independent data objects are representative of security information associated with the token device; and

a processor cooperatively operable with the interface and configured to determine a set of independent data objects that are associated with the token device, retrieve at least a portion of the set of independent data objects from non-contiguous memory, aggregate the set of independent data objects associated with the token device into a group, compress the group into a unit of contiguous data to be written to the token device as a set of blocks, and write the set of blocks to the token device via the interface, wherein the writing of the set of blocks to the token device is performed when at least one of the following occurs;

when the token device is enrolled, when data corresponding to the token device is recovered to the token device, and when the token device is loaded with executable instructions.

2. The system of claim 1, wherein the writing is performed via a secure connection over the interface.

3. The system of claim 1, further comprising associating a version number with the unit of contiguous data to be written to the token device, writing the version number to the token device in association with the unit of contiguous data, updating the unit of contiguous data when at least one of the independent data objects is changed, and changing the version number when the unit of contiguous data for the token device is updated.

4. The system of claim 1, wherein the independent data objects in the set are aggregated in the group according to a predetermined format.

5. A method comprising:

providing, by a processor, a set of independent data objects to a token device, wherein the set of independent data objects are representative of security information associated with the token device;

determining, by the processor, the set of independent data objects that are associated with the token device;

retrieving at least a portion of the set of independent data objects from non-contiguous memory;

aggregating, by the processor, the set of independent data objects into a group;

compressing, by the processor, the group into a unit of contiguous data to be written to the token device as a set of blocks; and

writing, by the processor, the set of blocks to the token device, wherein the writing of the set of blocks to the token device is performed when at least one of the following occurs;

when the token device is enrolled, when data corresponding to the token device is recovered to the token device, and when the token device is loaded with executable instructions.

6. The method of claim 5, further comprising:

connecting to the token device; and

verifying that the token device is the token device corresponding to the unit of contiguous data.

7. The method of claim 6, wherein the connecting is performed via a secure connection.

8. The method of claim 5, further comprising connecting to the token device via a secure connection.

9. The method of claim 5, further comprising associating a version number with the unit of contiguous data to be written to the token device, and writing the version number to the token device in association with the unit of contiguous data, wherein the version number is changed when the unit of contiguous data for the token device is changed.

10. The method of claim 5, wherein the independent data objects in the set are aggregated in the group according to a predetermined format.

11. A non-transitory machine-accessible medium including instructions that, when executed by a machine, cause the machine to perform a method comprising:

providing, by a processor of the machine, a set of independent data objects to a token device, wherein the set of independent data objects are representative of security information associated with the token device;

determining, by the processor, the set of independent data objects that are associated with the token device;

retrieving at least a portion of the set of independent data objects from non-contiguous memory;

aggregating, by the processor, the set of independent data objects into a group;

compressing, by the processor, the group into a unit of contiguous data to be written to the token device as a set of blocks; and

writing, by the processor, the set of blocks to the token device, wherein the writing of the set of blocks to the token device is performed when at least one of the following occurs;

when the token device is enrolled, when data corresponding to the token device is recovered to the token device, and when the token device is loaded with executable instructions.

12. The non-transitory machine-accessible medium of claim 11, wherein the method further comprises:

connecting to the token device; and

verifying that the token device is the token device corresponding to the unit of contiguous data.

13. The non-transitory machine-accessible medium of claim 12, wherein the connecting is performed via a secure connection.

14. The non-transitory machine-accessible medium of claim 11, wherein the method further comprises connecting to the token device via a secure connection.

15. The non-transitory machine-accessible medium of claim 11, wherein the method further comprises associating a version number with the unit of contiguous data to be written to the token device, and writing the version number to the token device in association with the unit of contiguous data, wherein the version number is changed when the unit of contiguous data for the token device is changed.

16. The non-transitory machine-accessible medium of claim 11, wherein the independent data objects in the set are aggregated in the group according to a predetermined format.