Patent ID: 7743403
Filing Date: 2010-06-22
Classification: G06F

Abstract:
1. A computer program product embodied in a tangible medium of expression comprising programming instructions, operable by a directory service that provides a central repository for information about system resources and users available in a data processing system, for: receiving a directory message requesting data that is maintained by the directory service; determining if the requested data is stored in encrypted form in a database maintained by the directory service, wherein the database comprises a directory and the requested data comprises an attribute value corresponding to an attribute of a directory object maintained in the directory; determining if, in response to a policy corresponding to the requested data, a receiver is a trusted client, wherein the policy corresponding to the requested data specifies (i) whether the attribute may be accessed and (ii) a manner of accessing the attribute; delivering the requested data in unencrypted form if the client is trusted; and delivering the requested data in encrypted form if the client is untrusted.