Patent Document ID: 7774831
Application ID: 10745326

Base Claim:
1. In a markup language processing device, a computer-implemented method in which a computer system performs security processing operations on markup language messages on behalf of a recipient computerized device that is to receive the markup language messages, the method comprising: receiving a message from a client computerized device including portions of tagged data formatted in a markup language; applying a transform selection rule set to at least one tagged rule selection data portion in the message to select at least one markup language transformation to apply to at least one tagged pre-transform data portion within the message; applying the selected at least one markup language transformation to the at least one tagged pre-transform data portion to transform the at least one tagged pre-transform data portion in the message to at least one tagged post-transform data portion in the message according to at least one transformation function associated with the at least one markup language transformation; and conditionally forwarding the message back to the client computerized device including the at least one tagged post-transform data portion to the recipient computerized device such that the recipient computerized device is not required to process the message due to operation of the at least one markup language transformation within the markup language processing device.

---

Claim 27:
27. The method of claim 1 further comprising: defining a plurality of security primitives, each security primitive operable to perform a specific data security processing task; defining a plurality of data transformations in a transformation language, each data transformation operable to match a tagged portion of data in a document and to specify application of at least one of the security primitives to the tagged portion of data; processing the plurality of data transformations in combination with the plurality of security primitives to produce markup language processing code operable to: i) identify, using code generated from the plurality of data transformations, a tag associated with the tagged portion of data in a document that matches one of the plurality of data transformations; and ii) in response to identifying a tag that matches one of the plurality of data transformation, applying at least one of the security primitives specified by the matching data transformation to the tagged portion of data to transform the tagged portion of data according to the specific data security processing task of that security primitive.