text:
|Publication number
|Publication type
|Application number
|Publication date
|Mar 23, 2004
|Filing date
|Mar 31, 1999
|Priority date
|Mar 31, 1999
|Fee status
|Publication number
|Richard H. Guski, Timothy J. Hahn
|Original Assignee
|International Business Machines Corporation
|Export Citation
|BiBTeX, EndNote, RefMan
|Patent Citations (11), Non-Patent Citations (7), Referenced by (114), Classifications (16), Legal Events (4)
|External Links: USPTO, USPTO Assignment, Espacenet
1. Technical Field
The present invention relates to a computer networking system, and deals more particularly with a method, system, and computer-readable code for delegating authentication and authority from a client to a server in order that the server can establish a secure connection to a back-end application on behalf of the client.
2. Related Art
As the amount of commerce continues to increase over networks, such as the Internet, security becomes a much larger issue. Unfortunately, the protocols underlying the Internet such as TCP/IP (Transmission Control Protocol/Internet Protocol), were not designed to provide secure data transmission. The Internet was originally designed with the academic and scientific communities in mind, and it was assumed that the users of the network would be working in non-adversarial, cooperative manners. As the Internet began to expand into a public network, usage outside these communities was relatively limited, with most of the new users located in large corporations. These corporations had the computing facilities to protect their user's data with various security procedures, such as firewalls, that did not require security to be built into the Internet itself. In the past several years, however, Internet usage has skyrocketed. Millions of people now use the Internet and the Web on a regular basis. (Hereinafter, the terms "Internet" and "Web" are used synonymously unless otherwise indicated.) These users perform a wide variety of tasks, from exchanging electronic mail messages to searching for information to performing business transactions. These users may be accessing the Internet from home, from their cellular phone, or from a number of other environments where security procedures are not commonly available.
To support the growth of business on the Internet, often referred to as "electronic commerce" or simply "e-commerce," easily-accessible and inexpensive security procedures had to be developed. A first commonly used security measure involves a Public Key Infrastructure (hereinafter "PKI"). PKI utilizes certificates as a basis for a security infrastructure. Certificates utilize public keys and third party verification entities to allow servers to decode client transmissions and authenticate the clients identity. In operation, a first node in a network can encrypt a message with their own private key. The message can be read by a second node with the first node's public key. A public key can only be used to decrypt messages created by the private key and cannot be used to encrypt messages. Thus, the first node is free to distribute their public key. One way in which public keys are distributed is by including them in certificates. There are a number of standards for certificates including the X0.509 standard, which defines a standard format for certificates. X0.509 is an ITU Recommendation and International Standard that defines a framework for providing authentication. (See "ITU Recommendation X0.509 (1997) Information Technology—Open Systems Interconnection—The Directory: Authentication Framework", hereinafter "Directory specification", dated 11/93. This information is also published in International Standard ISDO/IEC 9594-8 (1995).) A certificate format is defined in this standard. Certificates created according to this international standard, in the defined format, are referred to as "X0.509 certificates".
In addition, Secure Sockets Layer, or "SSL" is also utilized to set up encrypted communication links and make use of certificates. SSL is commonly used with applications that send and receive data using the HyperText Transfer Protocol ("HTTP"). HTTP is the protocol most commonly used for accessing that portion of the Internet referred to as the Web. When HTTP is used with SSL to provide secure communications, the combination is referred to as "HTTPS." Non-commercial Internet traffic can also benefit from the security SSL provides. SSL has been proposed for use with data transfer protocols other than HTTP, such as Simple Mail Transfer Protocol ("SMTP") and Network News Transfer Protocol ("NNTP").
SSL is a networking protocol developed by Netscape Communications Corp. and RSA Data Security, Inc. to enable secure network communications in a non-secure environment, where it operates as a protocol layer above the TCP/IP layers. The application code then resides above SSL in the networking protocol stack. After an application (such as a browser) creates data to be sent to a peer in the network, the data is passed to the SSL layer where various security procedures are performed on it, and the SSL layer then passes the transformed data on to the TCP layer. On the receiver's side of the connection, after the TCP layer receives incoming data, the data is passed upward to the SSL layer where procedures are performed to restore the data to its original form, and that restored data is then passed to the receiving application. The most recent version of SSL is described in detail in "the SSL Protocol, Version 3.0," dated Nov. 18, 1996 and available on the World Wide Web ("Web") at http ://home.netscape.com/eng/ss 13/draft302.txt (hereinafter, "SSL specification").
These security features are very powerful, and provide a high degree of protection for Internet users. However, both PKI and SSL were designed as two-party protocols, to be used in a simple client/server environment. The SSL protocol allows a client to request a secure communication session by sending a message to a server application. The server then responds, and a sequence of messages are exchanged in a handshaking protocol where the various security-related parameters are negotiated. The encryption algorithms to be used for message privacy and data integrity are agreed upon, and both the client and server may authenticate each other's identity. Authentication is performed during the handshake by exchanging digital certificates. The server sends its certificate to the client, enabling the client to authenticate the server's identity. The server then requests the client's certificate, which the client sends in order that the server can also authenticate the client's identify. If the authentication results are acceptable, the parties complete the handshake, and begin to exchange encrypted application data over the secure session they have established.
While the aforementioned security measures have proved to be useful for a two-party protocol, the traditional client-server model for network computing is being extended in the web environment to what is referred to as a "multi-tier architecture." This architecture may be characterized as a chain of nodes (e.g., a client and multiple servers) wherein a middle-tier or intermediate server may need to contact an end-tier server on behalf of the client. In such a case, the middle-tier server is said to be acting as a delegate of the client, and the process is generally referred to as delegation. In general, there is no limitation on the number of nodes involved in a delegation process. Thus, a first-tier server in contact with a client may be required to act as a delegate of the client by contacting a second-tier server on the client's behalf, and the second-tier server may be required to contact a third-tier server on behalf of either/both the second-tier server or the client.
This multi-tiered architecture recognizes the fact that many client requests do not simply require the location and return of static data by the first server, but require an application program to perform processing of the client's request in order to dynamically create and format the data to be returned. For example, during a commercial transaction between a client and a first server, the first server may need to contact a second server to collect financial information or perform a financial transaction on behalf of the client. In turn, the second server may need to collect a credit history on behalf of the client from a third server, etc. During each such new request in such a chain, it is often imperative that the server fulfilling the request be able to verify that the action is being done with the permission of the client, and/or a previous server in the chain. For example, before a second server (e.g., a bank) debits a client's account based upon a request from a first server (e.g., a commercial web site), the bank must be certain that the client gave permission to do this. Thus, the second server must have some reliable mechanism for verifying a delegated action.
Unfortunately, security protocols, such as those provided by SSL, are strictly two-party protocols, i.e., their use is limited to establishing a secure session between the client and a first or middle-tier server. Accordingly, there are no current methods for extending these secure sessions into a multi-tiered environment. The client authentication process within SSL is designed such that the client digitally signs data that it derives from the middle-tier server's certificate during the handshaking protocol. This digital signature requires the client to use its private key for encryption, and to send the resulting signature back to the middle-tier server along with the client's certificate. The client's private key must never leave the client machine, or it would no longer meet the requirements for a private key. Thus, the middle-tier server cannot create a digital signature on behalf of the client, because the middle-tier server cannot learn the client's private key.
U.S. Pat. No. 5,224,163, entitled METHOD FOR DELEGATING AUTHORIZATION FROM ONE ENTITY TO ANOTHER THROUGH THE USE OF SESSION ENCRYPTION KEYS, issued to Gasser et al. on Jun. 29, 1993, which describes many of the protocols described herein, utilizes a set of point to point certificates sent in sequences. However, the '163 patent does not provide a single signed data structure that can be examined by each server in a chain of servers for delegation purposes. Accordingly, a need exists for a technique for providing security in a multi-tier network environment such that the client's identity can be certified by any server fulfilling requests for the client. Each of the above references is hereby incorporated by reference.
The present invention overcomes the above-mentioned problems by providing a network system that includes a verification system, the network system comprising: a plurality of sequential nodes 1 . . . M, wherein each node n within the plurality of sequential nodes includes a system for securely communicating with an nth+1 node on behalf of any earlier node; a verification program stored on a computer readable medium, and executable by the nth+1 node to verify any of the earlier nodes by examining a certification data structure (CDS) built by the nth−1 node, wherein the verification program comprises: a mechanism for opening the certification data structure created by the nth−1 node, a mechanism for extracting a public key of the nth−1 node from the certification data structure, and a mechanism for verifying a signature of the certification data structure.
The certification data structure created by an nth−1 node may comprise: a first field containing a certificate of the nth−1 node; a second field containing a certificate of the nth node; a third field containing an expiration time stamp; a fourth field containing a maximum node depth; a fifth field containing the certificate data structure created by the nth−2 node, and a sixth field containing a digital signature of the first, second, third, fourth, and fifth fields encrypted by a private key of the nth−1 node.
Thus, each certification data structure comprises a nested set of previous certification data structures. In this manner, a single data structure format can be utilized by any server for delegation purposes. Accordingly, the verification program need only open a single data structure to verify each previous node in a chain delegating nodes. (Note that the certification data structure created by the first node need not include the fifth field, since there exist no prior nodes.)
The present invention is illustrated by way of example in the accompanying drawings in which like references indicate like elements and in which:
FIG. 1 is a block diagram of a computer workstation environment in which the present invention may be practiced;
FIG. 2 is a diagram of a network computer environment in accordance with a preferred embodiment of the present invention;
FIG. 3 depicts a three tier network environment in accordance with a preferred embodiment of the present invention;
FIG. 4 depicts a multi-tier network architecture in accordance with a preferred embodiment of the present invention;
FIG. 5 depicts two potential embodiments of a certification data structure in accordance with a preferred embodiment of the present invention; and
FIG. 6 depicts a flow diagram of a CDS verification mechanism in accordance with a preferred embodiment of the present invention.
FIG. 1 illustrates a representative workstation hardware environment in which the present invention may be practiced. The environment of FIG. 1 comprises a representative single user computer workstation 10, such as a personal computer, including related peripheral devices. The workstation 10 includes a microprocessor 12 and a bus 14 employed to connect and enable communication between the microprocessor 12 and the components of the workstation 10 in accordance with known techniques. The workstation 10 typically includes a user interface adapter 16, which connects the microprocessor 12 via the bus 14 to one or more interface devices, such as a keyboard 18, mouse 20, and/or other interface devices 22, which can be any user interface device, such as a touch sensitive screen, digitized entry pad, etc. The bus 14 also connects a display device 24, such as an LCD screen or monitor, to the microprocessor 12 via a display adapter 26. The bus 14 also connects the microprocessor 12 to memory 28 and long-term storage 30 which can include a hard drive, diskette drive, tape drive, etc.
The workstation 10 may communicate with other computers or networks of computers, for example via a communications channel or modem 32. Alternatively, the workstation 10 may communicate using a wireless interface at 32, such as a CDPD (cellular digital packet data) card. The workstation 10 may be associated with such other computers in a local area network (LAN) or a wide area network (WAN), or the workstation 10 can be a client in a client/server arrangement with another computer, etc. All of these configurations, as well as the appropriate communications hardware and software, are known in the art.
FIG. 2 illustrates a data processing network 40 in which the present invention may be practiced. The data processing network 40 may include a plurality of individual networks, such as a wireless network 42 and network 44, each of which may include a plurality of individual workstations 10. Additionally, as those skilled on the art will appreciate, one or more LAN's may be included (not shown), where a LAN may comprise a plurality of intelligent workstations coupled to a host processor.
Still referring to FIG. 2, the networks 42 and 44 may also include mainframe computers or servers, such as a gateway computer 46 or application server 47 (which may access a data repository 48). A gateway computer 46 serves as a point of entry into each network 44. The gateway 46 may be preferably coupled to another network 42 by means of a communications link 50 a. The gateway 46 may be implemented utilizing an Enterprise Systems Architecture/370 available from IBM, an Enterprise Systems Architecture/390 computer, etc. Depending on the application, a midrange computer, such as an Application System/400 (also known as an AS/400) May be employed. ("Enterprise Systems Architecture/370" is a trademark of IBM; "Enterprise Systems Architecture/390," "Application System/400," and "AS/400," are registered trademarks of IBM.)
The gateway computer 46 may also be coupled 49 to a storage device (such as data repository 48). Further, the gateway 46 may be directly or indirectly coupled to one or more workstations 10.
Those skilled in the art will appreciate that the gateway computer 46 may be located a great geographic distance from the network 42, and similarly, the workstations '10 may be located a substantial distance from the networks 42 and 44. For example, the network 42 may be located in California, while the gateway 46 may be located in Texas, and one or more of the workstations 10 may be located in New York. The workstations 10 may connection to the wireless network 42 using a networking protocol such as the Transmission Control Protocol/Internet Protocol ("TCP/IP") over a number of alternative connection media, such as cellular phone, radio frequency networks, satellite networks, etc. The wireless network 42 preferably connects to the gateway 46 using a network connection 50 a such as TCP or UDP (User Datagram Protocol) over IP, X0.25, Frame Relay, ISDN (Integrated Services Digital Network), PSTN (Public Switched Telephone Network), etc. The workstations 10 may alternatively connect directly to the gateway 46 using dial connections 50 b or 50 c. Further, the wireless network 42 and network 44 may connect to one or more other networks (not shown), in an analogous manner to that depicted in FIG. 2.
Software programming code and related data structures (hereinafter "software") that embody the present invention may be accessed by the microprocessor 12 of the workstation 10, server 47, or other servers and devices from long-term storage media 30 of some type, such as a CD-ROM drive or hard drive, as well as other memory systems (e.g., RAM, ROM, etc.). The software may be embodied on any of a variety of known media for use with a data processing system, such as a diskette, hard drive, or CD-ROM. The software may be distributed on such media, or may be distributed to users from the memory or storage of one computer system over a network of some type to other computer systems for use by users of such other systems. In such cases, a carrier wave (e.g., electromagnetic, optical, etc.) embodying the code and/or data structures may be utilized. Alternatively, the software may be embodied in the memory 28, and accessed by the microprocessor 12 using the bus 14. All techniques and methods for embodying software in memory, on physical media, and/or distributing software code via networks are well known and are all within the scope of this invention.
A user of the present invention at a client computer may connect his computer to a server using a wireline connection, or a wireless connection. Wireline connections are those that use physical media much as cables and telephones lines, whereas wireless connections use media such as satellite links, radio frequency waves, and infrared waves. Any connection technique can be used with these various media, such as: using the computer's modem to establish a connection over a telephone line; using LAN card such as Token Ring or Ethernet; using a cellular modem to establish a wireless connection; etc. The user's computer may be any type of computer processor, including laptop, handheld or mobile computers; vehicle-mounted device; desktop computers; mainframe computers; embedded computers, etc. having processing (and optionally communication) capabilities. The remote server, similarly, can be one of any number of different types of computer which have processing and communication capabilities. These techniques are well known in the art, and the hardware devices and software which enable their use are readily available. Hereinafter, a user's computer will be referred to equivalently as a "workstation," "device," or "computer," and use of any of these terms or the term "server" refers to any type of computing device. All clients and servers are generally referred to as "nodes" within the network. Moreover, a node may act as both a client and a server, depending upon the particular application.
In the various alternative preferred embodiments, the present invention is implemented as one or more computer software programs. The software may be implemented as one or more modules (also referred to as code subroutines, or "objects" in object-oriented programming) which are invoked upon request. The location of the software (whether on the client workstation or on a particular server) may differ for the various alternative embodiment. The logic implementing the delegation may be integrated with the code of a security protocol, such as SSL, or it may be implemented as one or more separate utility modules, which provide services that are invoked by such a program. Any of the servers described herein may be functioning as Web servers, where the Web servers provide services in response to requests from a client connected through the Internet, or from another server. In addition, the present invention may be implemented as an intranet or extranet, or in any other network environment.
Referring now to FIG. 3, a network system 52 is depicted that comprises three tiers or nodes. The exemplary system 52 comprises a client 54, a first server 56, and a second server 58. In this example, server 56 is an intermediate server that is in direct communication with client 54, and can act on behalf of the client by interacting with server 58. In this example, each node, i.e., client 54, server 56, and server 58, is shown to contain the necessary components to provide secure delegation in accordance with this invention. While the discussions contained herein with respect to FIG. 3 contemplate a three-tier network, it is understood that the number of tiers is not limited, and the concepts can be readily expanded to an n tier system. Nonetheless, for purposes of this example, only three tiers will be considered.
Client 54 comprises a certificate 60, a private key 62, and a public key 64. Client 54 also includes SSL/PKI capabilities 66 for providing two-tier security with server 56. Furthermore, client 54 comprises a CDS (Certificate Data Structure) building mechanism 68. The CDS building mechanism 68 creates a CDS 70, which can be passed along to the other nodes to allow for verification. In particular, CDS 70 comprises a certification data structure built by client 54, which is then passed to middle-tier node, (i.e., server 56), and is then passed to the end-tier node (i.e., server 58) so that the end-tier node can verify client 54.
Specifically, CDS 70 is a set of information, digitally signed by client 54 with the client's private key 62, that allows server 56 to act as a delegate of client 54. Since the information is signed by the client 54 with the client's private key 62, the information in the CDS 70 cannot be tampered with by any intermediate servers. The information in the CDS 70 need not be private, so that the information need not be encrypted. The contents of the CDS 70 will generally comprise the client's certificate 60, server 56's certificate 72, an expiration time stamp, a maximum allowed depth of use, and a digital signature of the above items, using the client's private key 62. The expiration time stamp is a time set by the client for which server 56 can act as a delegate of the client 54. The maximum allowed depth of use is a number set by the client 54 to limit the number of servers or nodes that are allowed in a chain of delegation. For example, client 54 can decide if server 58 is allowed to contact a fourth tier server (not shown) on behalf of the client 54. The structure of CDS 70 will be described in more detail with regard to FIG. 5.
When client 54 wants server 56 to act as its delegate, it passes CDS 70 to server 56. Once server 56 has CDS 70, it can now act as a delegate on behalf of client 54. For example, should server 56 need to contact server 58 on behalf of client 54, server 56 would build CDS 71 and transfer CDS 71 to server 58. Server 58 could then use the CDS verification mechanism 84 to verify that server 56 has permission to act as a delegate of client 54. Essentially, the CDS verification mechanism 84 extracts the public key 74 of the server 56 from the CDS 71, and then decrypts the digital signature and verifies the signature (e.g., verifies a check sum) of the CDS 71 to ensure that the CDS 71 was not tampered with. If CDS 71 is verified, server 58 knows that server 56 sent the CDS. Server 58 then extracts the public key 64 of the client 54 from CDS 70, decrypts and verifies its digital signature. If the CDS 70 is verified, server 58 knows that the client 54 has indeed given permission to server 56 to act on the client's behalf.
In addition, the CDS verification mechanism 84 can check the expiration time stamp and maximum depth set by the client 54. If the time has expired, or the maximum depth has been exceeded, the end-tier server will know not to fulfill the request of the middle-tier server. The CDS verification mechanism 84 will be described in more detail with respect to the flow chart shown in FIG. 6 and the pseudo source code provided below.
Additionally, it can be seen that servers 56 and 58 may need to communicate many times on multiple clients' behalf. As a performance improvement, servers 56 and 58 can mutually agree on a shared secret symmetric encryption key, which could then be used for signing CDS 71. This performance improvement is described in more detail below with respect to FIG. 4. (An example of a symmetric security protocol includes Data Encryption Standard (DES), FIPS PUB 46, National Bureau of Standards, Jan. 5, 1977, which utilizes a single key to both encrypt and decrypt data.)
Referring now to FIG. 4, a more generalized network 85 comprised of a chain of M+1 nodes is depicted. Specifically, network 85 comprises a plurality of nodes, node 0, node 1, . . . node M. While, in this example, node 0 is generally characterized as the original client, node 1 as the first server, node 2 as the second server, etc., any of the nodes can act as either or both client and server nodes. In this example, node 1 is to act on behalf of node 0 by communicating with node 2, node 2 is to act as a delegate of nodes 0 and I by communicating with node 3, node 3 is to act as a delegate of nodes 0, 1 and 2 by communicating with node 4 , etc., up to node M.
To accomplish this, node 0 would first build CDS 0 and give CDS 0 to node 1. Node 1 would then build and transmit CDS 1 (which contains CDS 0) to node 2 so that node 2 could verify node 1 as an authentic delegate of node 0. Then, if node 2 needed to contact node 3 on behalf of node 1 acting as a delegate of node 0, node 2 would build CDS 2 and deliver it to node 3. Node 2 would transfer CDS 2 to node 3 so that node 3 could perform the proper authentication of CDS 2 acting as a delegate of node1, which is acting as a delegate of node 0. This would then continue such that each node requiring a delegate node would build a CDS for the delegate node to verify. Each new CDS (e.g., CDS n) is built in a nested manner to include the prior CDS (e.g., CDS n−1), which in turn includes the prior CDS (e.g., CDS n−2), etc. Thus, each node in the chain can verify each previous node, as well as the original node, node 0.
In addition, as described above, a performance optimization comprising a mixed digital signature method may be utilized. Specifically, nodes 0-(M−1) may use public/private keys 90 (e.g., SSL) for signing CDS 0, while nodes (M−1)-M may utilize a mutually agreed upon secret symmetric signing key 92 (e.g., DES). This optimization reduces the security overhead, while maintaining a necessary level of security. Specifically, node M can verify that node M−1 sent CDS(M−1) since the signature would match only if the correct, secret, signing key was used. The optimization may be exploited in the following two ways.
First, if a server P knows that the CDS will go no further than the next server P+1 (based on a maximum depth setting by either the client, server P or intermediate server), then the server P can use a previously agreed to symmetric signing key when sending the CDS it is building to the next server P+1. Previously agreed to symmetric signing keys can be established only between "adjacent" servers that communicate directly with each other. Accordingly, server P+1, using the previously agreed to symmetric signing key, can verify that the CDS came from server P and was not tampered with since the only key that could have allowed the signature verification was the agreed to by servers P and P+1.
The second case involves the situation where, for example, the maximum depth set by the client is unbounded, i.e., any depth is supported. Then, if the identity of all servers 1-P in a chain of servers are unimportant to the application, previously agreed to symmetric signing keys can be used to sign the CDS's as they are built by each server. The symmetric signing keys are set up between pairs of adjacent servers (i.e., server 1 & server 2, . . . , server n−1 & server n, server n & server n+1 . . . ). When these keys are used, each new server in the chain cannot be guaranteed of the identities of the previous intermediate servers since there is no way to check signatures (other than "adjacent" servers that utilized previously agreed to signing keys). Any server in the chain, however, can verify the signature of the first CDS that was built by the client (node 0) since the client's private key was used to sign the CDS. Each server can also verify that the expiration time stamp set by the client has not been exceeded.
This second case provides a mechanism for providing an "impersonation" style of delegation that is useful when the identities of the intermediate servers are not required by a new server. In order to implement this, the CDS may include an optional flag that can be set by the client indicating that impersonation is to be used.
FIG. 5 depicts the general format for CDS's. Specifically, there is depicted an original CDS 86, CDS 0 that describes the CDS for the first node in a chain of nodes. CDS 0 86 is a data structure that includes the fields as described above, namely, a certificate of node 0, a certificate of node 1, an expiration time stamp, a maximum depth of use, and a digital signature of the first four fields, encrypted with a private key of node 0. The digital signature may be simply an encrypted check sum of the first four fields.
Next, CDS (n) 88 is depicts a generic data structure for each CDS after CDS 0 86. As with CDS 0 86, CDS (n) 88 comprises a first certificate from node n (i.e., the node that is giving permission to another node to act as its delegate), a second certificate from node n+1 that is acting as the delegate, an expiration time stamp, and a maximum depth of use. In addition, CDS (n) 88 comprises an extra field that includes the CDS from the prior node (i.e. node n−1) in the chain. Each such CDS is built in a recursive manner such that CDS (n) includes CDS (n−1), CDS (n−1) includes CDS(n−2), etc. CDS (n) also include a digital signature encrypted with node n's private key.
The ASN .1 description of the CDS as described above is:
PKICertificationOfUse {<OID to be assigned>}
SIGNED, Certificate
From AuthenticationFramework {joint-iso-ccitt ds (5) module (1) authenticationFramework (7) 2}
-- types --
} }
While FIG. 5 describes a preferred format for CDS's, it is understood that other arrangements, formats, and fields may be utilized to accomplish the same functionality and are within the scope of this invention. For example, if the performance optimization using mixed digital signature, additional data fields may be included, namely a symmetric signature, symmetric signature key, and a public key signature of the symmetric key.
Referring now to FIG. 6. A flow diagram of the CDS verification mechanism 84 is depicted for processing CDS n by, for example, node n+2. First node n's certificate is extracted and certified within the PKI infrastructure 94. Next 96, the public key of node n is extracted, and the validity of CDS n is verified by decrypting the digital signature and comparing it to the check sum of CDS n. Subsequently 98, node n+1's certificate is extracted and verified ensuring that CDS(n+1) was sent to its intended recipient. Finally, the maximum allowable depth is extracted and verified 100, and the expiration time stamp is extracted and verified 102. The procedure is then repeated for CDS(n−1) . . . CDS(0) in a recursive manner.
The following algorithm may be used to determine whether the CDS is acceptable (i.e., the maximum depth has not been exceeded for any maximum depth contained in the CDS nor has the expiration time been exceeded for any expiration time stamp contained in the CDS). The result of the algorithm is a flag indicating whether or not the CDS is valid and if so, a list of the nodes contained in the CDS, ordered from C0-CN. The algorithm uses CDSN−(N=1) input so as to simulate execution by node CN+1.
Procedure ProcessCDS( [in] CDS, [out] validFlag, [out] ConsumerChainStack, [out] StackDepth)
Set ConsumerChainStack=NULL
Set StackDepth=0
Set CurrentTime=obtain Current time
Set Rc=Successful
Call ParseCDS(CDS, CurrentTime, ConsumerChainStack, StackDepth, Rc)
If Rc !=Successful then
First entry in ConsumerChainStack contains the Name of the Originator StackDepth indicates how many intermediate servers were traversed
End Procedure
Procedure ParseCDS([in] CDS, [in] CurrentTime, [in/out] ConsumerChainStack, [in/out] StackDepth, [out] ReturnCode)
Extract certificateOfOriginator and public key certificateOfOriginator and public key from certificateOfOriginator
Verify signature of CDS
If not Verified then
Set ReturnCode=IncorrectSignature
If MaximumDepth<StackDepth+1 then
Set ReturnCode=depthExceeded
Extract Originator Name from certificate OfOriginator
Add Originator Name to top of ConsumerChainStack
Increment StackDepth
If CDSPrevious is Present then
Call ParseCDS(CDS, ConsumerChainStack, StackDepth, ReturnCode)
End Procedure
Once the CDS has been validated and parsed, the server processing the CDS can use the resulting information to determine the originator of the request. This information might be used by the server in performing operations on behalf of the original node, or any intermediate nodes that are acting on behalf of the original node.
The foregoing descriptions of the preferred embodiments in the invention have been presented for purposes of illustration and description. They are not intended to be exhaustive or to limit the invention to the precise form disclosed, and obviously many modifications and variations are possible in view of the above teachings. Such modifications and variations that may be apparent to a person skilled in the art are intended to be included within the scope of this invention as defined by the accompanying claims.
|Cited Patent
|Filing date
|Publication date
|Feb 12, 1988
|Sep 19, 1989
|Fischer Addison M
|Public key/signature cryptosystem with enhanced digital signature certification
|Mar 7, 1989
|Apr 2, 1991
|Fischer Addison M
|Public key/signature cryptosystem with enhanced digital signature certification
|May 13, 1992
|May 25, 1993
|Fischer Addison M
|Public key/signature cryptosystem with enhanced digital signature certification
|Sep 28, 1990
|Jun 29, 1993
|Digital Equipment Corporation
|Method for delegating authorization from one entity to another through the use of session encryption keys
|Jan 17, 1995
|Mar 25, 1997
|Document Authentication Systems, Inc.
|System and method for electronic transmission storage and retrieval of authenticated documents
|Jun 4, 1993
|Jul 15, 1997
|Xerox Corporation
|Method for delegating access rights through executable access control program without delegating access rights not in a specification to any intermediary nor comprising server security
|Dec 15, 1995
|Apr 28, 1998
|Entegrity Solutions Corporation
|Security infrastructure for electronic transactions
|Sep 15, 1995
|May 5, 1998
|Document Authentication Systems, Inc.
|System and method for electronic transmission, storage and retrieval of authenticated documents
|Mar 26, 1996
|Dec 15, 1998
|Entegrity Solutions Corporation
|Secure world wide electronic commerce over an open network
|Oct 27, 1998
|Dec 11, 2001
|Sprint Communications Company, L. P.
|Object-based security system
|Feb 27, 1998
|Jun 6, 2002
|Microsoft Corporation
|Gump: grand unified meta-protocol for simple standards-based electronic commerce transactions
|"A DCE Directory/Security Structure for the Intranet/Enterprise", IBM Corporation, Research Disclosure, p. 453, Apr. 1998.
|"DFS As An Internet File System", IBM Corporation, Research Disclosure, pp. 625-626, May 1998.
|"Extending Secure Sockets Layer for Key Recovery", IBM Technical Disclosure Bulletin, vol. 41, No. 01, pp. 169-170, Jan. 1988.
|Branchaud, Marc, A Survey of Public-Key Infrastructures, Department of Computer Science, McGill University, Montreal, Canada, Mar. 1997, entire document, particularly chapters 3 and 4.*
|Hu, Yuh-Jong, "Agent-Oriented Public Key Infrastructure for Multi-Agent E-Service", Emerging Network Technology Lab. Dept. of Computer Science, National Chengchi University, Taipei, Taiwan 116, 1999, entire document.*
|Microsoft Corp.,IMAGEHLP Functions for Embedding Digital Signatures in PE-Format Executables (draft),Microsoft Corp, Feb. 1996,entire document.*
|Szabo, Nick, "Delegation and Agreement Based Certification Policy", http://szabo.best.vwh.net/trust.html, 1997, entire document.*
|Citing Patent
|Filing date
|Publication date
|Jun 21, 2000
|Mar 29, 2005
|Microsoft Corporation
|Architectures for and methods of providing network-based software extensions
|Apr 25, 2001
|Apr 26, 2005
|Probaris Technologies Inc.
|Method for automatically generating list of meeting participants and delegation permission
|Jan 30, 2001
|Jul 26, 2005
|Networks Associates Technology, Inc.
|Scalable system and method for management and notification of electronic certificate changes
|Apr 26, 2001
|Mar 21, 2006
|Proofspace, Inc.
|System and method for graphical indicia for the certification of records
|Apr 26, 2001
|May 16, 2006
|Dfs Linkages, Inc.
|System and method for widely witnessed proof of time
|Nov 10, 2005
|Apr 24, 2007
|Dfs Linkages, Inc.
|System and method for graphical indicia for the certification of records
|Jun 15, 2000
|May 29, 2007
|International Business Machines Corporation
|System and method for securing data on private networks
|Apr 21, 2006
|Jun 24, 2008
|Fuji Xerox Co., Ltd.
|Access privilege transferring method
|Sep 8, 2000
|Sep 9, 2008
|System and method for facilitating access by sellers to certificate-related and other services
|Feb 8, 2002
|Oct 7, 2008
|Dynamic management of access rights lists in a portable electronic object
|Dec 22, 2004
|Oct 27, 2009
|Wells Fargo Bank, N.A.
|Authentication system for networked computer applications
|Oct 15, 2001
|Nov 24, 2009
|Nokia Corporation
|Wireless lock system
|Sep 16, 2004
|Mar 2, 2010
|Microsoft Corporation
|User interface for integrated spreadsheets and word processing tables
|Jun 24, 2004
|Mar 9, 2010
|Microsoft Corporation
|Executing applications at appropriate trust levels
|Feb 11, 2005
|Mar 30, 2010
|Microsoft Corporation
|Methods and systems of providing information to computer users
|Sep 30, 2004
|Apr 6, 2010
|Microsoft Corporation
|Systems and methods for handwriting to a screen
|Oct 8, 2004
|Apr 20, 2010
|Microsoft Corporation
|Spreadsheet fields in text
|Nov 15, 2004
|May 4, 2010
|Microsoft Corporation
|Mutually exclusive options in electronic forms
|Jul 23, 2004
|May 4, 2010
|Microsoft Corporation
|Task-sensitive methods and systems for displaying command sets
|Nov 16, 2004
|May 18, 2010
|Microsoft Corporation
|Methods and systems for server side form processing
|Apr 7, 2006
|May 25, 2010
|Wells Fargo Bank, N.A.
|Authentication system for networked computer applications
|Mar 4, 2005
|May 25, 2010
|Microsoft Corporation
|Designer-created aspect for an electronic form template
|Jan 26, 2006
|Jun 8, 2010
|Identrust, Inc.
|System and method for transparently providing certificate validation and other services within an electronic transaction
|Jan 27, 2005
|Jun 22, 2010
|Microsoft Corporation
|Methods and systems for delivering software via a network
|May 2, 2006
|Jul 20, 2010
|Lg Electronics Inc.
|Proprietary watermark system for secure digital media and content distribution
|May 4, 2004
|Jul 27, 2010
|Identrust, Inc.
|System and method for providing payment services in electronic commerce
|Mar 11, 2005
|Aug 3, 2010
|Microsoft Corporation
|Delegating right to access resource or the like in access management system
|Nov 12, 2004
|Aug 10, 2010
|International Business Machines Corporation
|Apparatus, system, and method for establishing an agency relationship to perform delegated computing tasks
|May 27, 2004
|Aug 10, 2010
|Microsoft Corporation
|Executing applications at appropriate trust levels
|May 25, 2007
|Aug 10, 2010
|Cipheroptics, Inc.
|Securing network traffic by distributing policies in a hierarchy over secure tunnels
|Sep 13, 2004
|Aug 17, 2010
|Microsoft Corporation
|Methods, systems, architectures and data structures for delivering software via a network
|Jan 30, 2006
|Aug 17, 2010
|Microsoft Corporation
|Opening network-enabled electronic documents
|Aug 12, 2004
|Oct 19, 2010
|Microsoft Corporation
|Single window navigation methods and systems
|Feb 14, 2007
|Jan 4, 2011
|Cipheroptics, Inc.
|Ethernet encryption over resilient virtual private LAN services
|Oct 15, 2007
|Jan 4, 2011
|Microsoft Corporation
|System and method for real-time validation of structured data files
|Jul 26, 2007
|Jan 25, 2011
|Lg Electronics Inc.
|Copy protection method and system for digital media
|Nov 8, 2006
|Mar 1, 2011
|Microsoft Corporation
|Authoring arbitrary XML documents using DHTML and XSLT
|Dec 15, 2004
|Mar 8, 2011
|Microsoft Corporation
|Recursive sections in electronic forms
|Mar 22, 2011
|Microsoft Corporation
|System and method for real-time validation of structured data files
|Jan 29, 2008
|Apr 12, 2011
|Microsoft Corporation
|Installing a solution
|Jan 14, 2005
|May 3, 2011
|Microsoft Corporation
|Structural editing operations for network forms
|Oct 31, 2007
|Jun 28, 2011
|Microsoft Corporation
|Correlation, association, or correspondence of electronic forms
|Sep 1, 2005
|Jul 12, 2011
|Microsoft Corporation
|Network-based software extensions
|Dec 5, 2005
|Aug 16, 2011
|Microsoft Corporation
|Enabling electronic documents for limited-capability computing devices
|Apr 15, 2005
|Aug 30, 2011
|Microsoft Corporation
|Query to an electronic form
|Jan 27, 2009
|Oct 25, 2011
|Microsoft Corporation
|Structural editing with schema awareness
|Sep 29, 2006
|Oct 25, 2011
|Certes Networks, Inc.
|Transporting keys between security protocols
|Oct 29, 2007
|Dec 6, 2011
|Microsoft Corporation
|Methods and systems for delivering software
|Oct 13, 2008
|Dec 13, 2011
|Microsoft Corporation
|Rendering an HTML electronic form by applying XSLT to XML using a solution
|Jul 23, 2007
|Dec 20, 2011
|Certes Networks, Inc.
|Enforcing security groups in network of data processors
|Sep 29, 2006
|Jan 24, 2012
|Certes Networks, Inc.
|Virtual security interface
|Jul 21, 2005
|Apr 10, 2012
|Sanyo Electric Co., Ltd.
|Method for transmission/reception of contents usage right information in encrypted form, and device thereof
|Jun 29, 2005
|Jun 12, 2012
|Microsoft Corporation
|Digital signatures for network forms
|Oct 9, 2008
|Jun 19, 2012
|Stragent, Llc
|Hash-based systems and methods for detecting and preventing transmission of unwanted e-mail
|Apr 18, 2010
|Sep 18, 2012
|Stragent, Llc
|Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses
|Nov 26, 2002
|Oct 2, 2012
|Gilat Satellite Networks Ltd.
|System and method for acceleration of a secure transmission over satellite
|Jan 22, 2007
|Oct 9, 2012
|Certes Networks, Inc.
|IP encryption over resilient BGP/MPLS IP VPN
|Jun 23, 2010
|Dec 4, 2012
|International Business Machines Corporation
|Method for establishing an agency relationship to perform delegated computing tasks
|Aug 10, 2010
|Dec 4, 2012
|Certes Networks, Inc.
|Securing network traffic by distributing policies in a hierarchy over secure tunnels
|Sep 25, 2006
|Feb 19, 2013
|Certes Networks, Inc.
|Security encapsulation of ethernet frames
|Apr 23, 2013
|Microsoft Corporation
|Correlation, association, or correspondence of electronic forms
|Oct 29, 2004
|Jul 16, 2013
|Microsoft Corporation
|Systems and methods for interacting with a computer through handwriting to a screen
|Sep 27, 2006
|Dec 10, 2013
|Certes Networks, Inc.
|Deploying group VPNS and security groups over an end-to-end enterprise network
|May 31, 2011
|Jan 7, 2014
|Google Inc.
|Updating shared keys
|Jun 5, 2012
|Jun 3, 2014
|Secure Channels Sa
|System and method for securing multiple data segments having different lengths using pattern keys having multiple different strengths
|Aug 28, 2012
|Jun 24, 2014
|Gilat Satellite Networks Ltd.
|System and method for acceleration of a secure transmission over satellite
|Jan 16, 2009
|Jul 29, 2014
|Identrust, Inc.
|Binding a digital certificate to multiple trust domains
|Nov 22, 2006
|Aug 26, 2014
|Charles Dulin
|Transaction coordinator for digital certificate validation and other services
|Feb 2, 2004
|Aug 26, 2014
|Microsoft Corporation
|Promoting data from structured data files
|Aug 14, 2012
|Oct 7, 2014
|Brocade Communications Systems, Inc.
|Public cloud data at rest security
|Aug 14, 2012
|Oct 14, 2014
|Brocade Communications Systems, Inc.
|Storage access authentication mechanism
|Apr 4, 2006
|Nov 18, 2014
|Identrust, Inc.
|Provision of authorization and other services
|Feb 8, 2008
|Nov 18, 2014
|Microsoft Corporation
|Translation file
|Apr 2, 2008
|Dec 23, 2014
|Microsoft Corporation
|Designing electronic forms
|Jan 6, 2014
|Mar 31, 2015
|Google Inc.
|Updating shared keys
|Mar 1, 2012
|Jul 28, 2015
|Gilat Satellite Networks Ltd.
|Decentralized caching system
|Jan 21, 2013
|Sep 29, 2015
|International Business Machines Corporation
|Controlling exposure of sensitive data and operation using process bound security tokens in cloud computing environment
|Apr 25, 2001
|Oct 31, 2002
|Berry Michael C.
|Method and system for managing access to services
|Mar 10, 2003
|Mar 11, 2004
|Authentidate Holding Corp.
|Digital file management and imaging system and method including secure file marking
|Aug 6, 2003
|Apr 15, 2004
|Kabushiki Kaisha Toshiba
|Methods and systems for flexible delegation
|Mar 24, 2003
|Sep 30, 2004
|Microsoft Corp.
|System and method for designing electronic forms and hierarchical schemas
|Jan 30, 2001
|Oct 28, 2004
|Cook Jeffrey V.
|Scalable system and method for management and notification of electronic certificate changes
|Nov 25, 2003
|Nov 11, 2004
|Larcheveque Jean-Marie H.
|Validation of XML data files
|Jun 30, 2003
|Dec 30, 2004
|Rivers-Moore Jonathan E.
|Declarative solution definition
|Sep 29, 2004
|Feb 24, 2005
|Microsoft Corporation
|Architectures for and methods of providing network-based software extensions
|Oct 8, 2004
|Mar 10, 2005
|Microsoft Corporation
|System and method for integrated spreadsheets and word processing tables
|Sep 27, 2002
|Mar 24, 2005
|Tommy Thorstensson
|Method and arrangement in a communications network
|Nov 9, 2004
|Apr 21, 2005
|Probaris Technologies, Inc.
|Method for automatically generating list of meeting participants and delegating permission
|Oct 9, 2004
|Jun 9, 2005
|Microsoft Corporation
|System and method for integrating spreadsheets and word processing tables
|Dec 22, 2004
|Jun 23, 2005
|Wachovia Corporation
|Authentication system for networked computer applications
|Feb 17, 2004
|Aug 18, 2005
|Microsoft Corporation
|Systems and methods for editing XML documents
|Sep 24, 2004
|Sep 22, 2005
|Levas Robert G
|Electronic form routing and data capture system and method
|Jun 30, 2005
|Dec 1, 2005
|Trac Medical Solutions, Inc.
|System for interactive processing of form documents
|May 4, 2004
|Jan 5, 2006
|Mckenney Mary K
|System and method for providing payment services in electronic commerce
|Jul 21, 2005
|Jan 26, 2006
|Yoshihiro Hori
|Method for transmission/reception of contents usage right information in encrypted form, and device thereof
|Feb 8, 2002
|Mar 16, 2006
|Pierre Girard
|Dynamic management of access rights lists in a portable electronic object
|Oct 15, 2001
|Apr 6, 2006
|Koskimies Oskari
|Wireless lock system
|Nov 15, 2004
|May 18, 2006
|Microsoft Corporation
|Role-dependent action for an electronic form
|Nov 12, 2004
|May 18, 2006
|Dawson Colin S
|Apparatus, system, and method for establishing an agency relationship to perform delegated computing tasks
|Jan 26, 2006
|Jun 8, 2006
|Miller Lawrence R
|System and method for transparently providing certificate validation and other services within an electronic transaction
|Nov 10, 2005
|Jun 22, 2006
|Doyle Michael D
|System and method for graphical indicia for the certification of records
|Apr 4, 2006
|Aug 10, 2006
|Tallent Guy S Jr
|Provision of authorization and other services
|Apr 7, 2006
|Aug 10, 2006
|Wachovia Corporation
|Authentication system for networked computer applications
|Apr 21, 2006
|Aug 24, 2006
|Fuji Xerox Co., Ltd.
|Access privilege transferring method
|May 2, 2006
|Aug 31, 2006
|Kuzmich Vsevolod M
|Proprietary watermark system for secure digital media and content distribution
|Mar 11, 2005
|Sep 14, 2006
|Microsoft Corporation
|Delegating right to access resource or the like in access management system
|Mar 15, 2004
|Oct 19, 2006
|Jan Wendenburg
|Electronic transmission of documents
|Aug 15, 2005
|Feb 15, 2007
|Microsoft Corporation
|Recognizing data conforming to a rule
|Feb 29, 2008
|Jun 17, 2010
|Panasonic Corporation
|Method, apparatus and system for distributed delegation and verification
|Aug 14, 2012
|Aug 15, 2013
|Brocade Communications Systems, Inc.
|Storage Access Authentication Mechanism
|Aug 14, 2012
|Aug 22, 2013
|Brocade Communications Systems, Inc.
|Public Cloud Data at Rest Security
|Sep 13, 2014
|Jan 1, 2015
|International Business Machines Corporation
|Controlling Exposure of Sensitive Data and Operation Using Process Bound Security Tokens in Cloud Computing Environment
|Mar 13, 2006
|Sep 13, 2006
|Microsoft Corporation
|Delegating right to access resource or the like in access management system or the like
|Apr 27, 2006
|Nov 2, 2006
|France Telecom
|Use of a server, addressee terminal, system and method for validating the delegation of an electronic signature
|U.S. Classification
|713/156, 713/157
|International Classification
|Cooperative Classification
|European Classification
|May 10, 1999
Owner name: INTERNATIONAL BUSINESS MACHINES CORPORATION, NEW Y
Free format text: ASSIGNMENT OF ASSIGNORS INTEREST;ASSIGNORS:GUSKI, RICHARD H.;HAHN, TIMOTHY J.;REEL/FRAME:009944/0921;SIGNING DATES FROM 19990429 TO 19990504
|Jul 13, 2007
|Fee payment
Year of fee payment: 4
|Jul 15, 2011
|Fee payment
Year of fee payment: 8
|Jun 30, 2015
|Fee payment
Year of fee payment: 12


text:
What is the best test to diagnose urinary tract stones?
Lindbloom, Erik
Metadata[+] Show full item record
Over the past 3 years, helical (or spiral) computerized tomography (CT) has proved the best method of testing for urinary tract stones. All reviewed studies published since mid-1998 found helical CT scan to be the safest and most accurate test. (Grade of recommendation: A, based on independent blind comparison of an appropriate spectrum of patients.)
Part of
Clinical Inquiries, 2001 (MU)

subset: commoncrawl


text:
I'm not usually the kind of person to agree with the conservatives but damn.
http://revolutionpac.com/defense Make sure to LIKE, FAVORITE, SHARE, and...897 views youtube.com
I'm not usually the kind of person to agree with the conservatives but damn.
Very well done; it your face, yet it intriques.
Despite all its mistakes I think it important to note that the USA has an incredible track record of dealing with other peoples and countries in a way that is better than most, if not all, who have ever wielded comparable power. How else do we explain Iraq's business dealings with China these days? Or that the Russians seem to spend so little time worrying about legal niceties like due process when they catch saboteurs? Or global immigration patterns? I won't belabour the point. I do, however, certainly agree that many of the USA's current policies, including foreign, have her heading in the wrong direction.
I love the frame shift this can engineer by changing the names but not the fundamental scenario. I'm very amused at how this view point is strange to many people.


text:
Why Am I So Motivated To Stick To This Meditation Practice? The Benefits Are Too Intense To IgnoreToday is my 260th day practicing Transcendental Meditation. I will have meditated 519 times. That's... MORE
"You Know That Tremendous Feeling Of Power When Your Phone Is Fully Charged?" – Jerry Seinfeld On Why He's Into...Jerry Seinfeld describes the Transcendental Meditation technique in fifty-five seconds. It's worth a watch!
Your TM Stories: It Was Like A Nice, Warm, Steady Light Was Turned On Inside Of MeWe recently asked our Facebook followers to send us their stories about learning and practicing... MORE
What's Making Students Happier, More Self-Confident, And Less Anxious?"What we're doing here is setting the conditions for learning, and that's not rocket science,... MORE
I Was Certain I Knew What Meditation Was And That It Wouldn't Benefit MeI was reluctant to learn TM for several reasons. As an avid practitioner of yoga,... MORE
School In Thailand Brings Peace, Happiness, And Opportunity To Orphaned And Abused Girls"These girls come from poor families or broken homes; some are orphans, violently abused or... MORE
My Journey Through GriefThere were so many things to navigate those first few months, things I could never... MORE
What Kind Of Life Do You Want To Live? Frantic, Stressed, And Distracted—Or Centered, Focused, Healthy, And Clear?Highlights from a live online Q&A with Bob Roth, hosted by Yahoo Health. Find out... MORE
To be certain that you receive each issue of Enlightenment,


text:
Skip to content. |
Skip to navigation
that advances sustainable development through the business practices of member companies and in partnership with governments, multi-lateral organizations, non-governmental organizations, and other stakeholders.
Learn more
Mobilizing people and organizations for economic, social, and environmental improvement
Sharing knowledge to create value for business and society
The WEC Gold Medal Award for International Corporate Achievement in Sustainable Development
On Sept 21-22, members of La Red de Pathways Challenge gathered at The Grand Forum in Miami together with foundations, impact investors, government representatives, thought leaders, corporations, and NGOs to build skills and explore shared challenges and opportunities for scaling solutions for business in Latin America and the Caribbean.
The Forum kicked off with a closed session of workshops designed specifically for the members of La Red to focus on skills for scaling solutions and ideas locally, nationally, and regionally. On the second day, the members engaged with stakeholders in discussions and interactive exercises of new ideas to find solutions and potential partnerships. To learn more about La Red, please visit www.lareddepathways.com.
From WEC CEO Terry Yosie
June 23, 2015
June 22, 2015
Read More...


text:
Welcome |
Log In
Visit JimiHendrix.com: The Official Jimi Hendrix Website
View Cart
Join our email list.
Items in Cart:
Browse The Store
Best Sellers
KISW-Park Foundation
New Items
Dagger Records
Music & Video
Guitar Gear
Books & Magazines
Experience Hendrix Tour
Gift Certificates
Hendrix: Band Of Gypsys DVD
Hendrix: Band Of Gypsys DVD
Item #: JHAM0252
Your Price:
Hendrix: Band Of Gypsys DVD
Thank you for emailing your friend!
First Name
Last Name
First Name
Last Name
Message (Optional)
Privacy Policy
The 2011 re-release of the Grammy-winning 1999 documentary film. Features an all-new stereo and 5.1 surround sound mix that are exclusive to this release.
Winner of the 2000 Grammy Award for "Best Long Form Music Video," Hendrix: Band Of Gypsys delves behind the scenes on the making of the seminal classic and the five live performances that comprised the period of the Band Of Gypsys. This 83-minute documentary features new interviews and rare and archival footage of Jimi Hendrix and the Band Of Gypsys including an additional 30 minutes of footage not included in the original television broadcast. Exclusive to the DVD release is 54 minutes of black & white video footage from the Band Of Gypsys' January 1, 1970 Fillmore East performance, plus several never before seen photos by photographer Jan Blom. -
Experience Hendrix/Legacy Recordings
People who bought this also bought:
Customer Reviews
Release Date:
April 12, 2011
Record Label:
Experience Hendrix / Legacy Recordings
Authentic Hendrix Item Number: 800-002-003
Previews require flash player.
Click here to download
Song Title
Customer Reviews
Post Review
Currently, there are no reviews available.
(0 reviews)
Post Review
People who bought this also bought:
Jimi Hendrix Live at Cologne CD
The Jimi Hendrix Experience: Live In Cologne , originally the twelfth release in the Dagger Records official bootleg series released as an LP and now on CD, documents this spirited, January 13, 1969 performance at the Sporthalle in Cologne, Germany. Hendrix kicked off the proceedings with a scalding "Come On (Let the Good Times Roll)" from Electric Ladyland. This Earl King chestnut had long been a favorite of Jimi's and here he began with a driving solo introduction before signaling Redding and Mitchell to join. Next followed a blistering version of "Foxey Lady," a perennial stage favorite. An abrupt tape cut precedes a memorable rendition of "Red House." Thankfully the performance is essentially complete lacking only Jimi's prefacing stage banter, offered as he likely changed guitars before starting. "Voodoo Child (Slight Return)" followed next, not yet established as Jimi's closing number as it would become later in 1969 and remain so throughout his career, but no less muscular. Jimi then shifted directly into "Fire" and then a thunderous "Spanish Castle Magic." The Experience were clearly locked in sync, pushing each other throughout all to the delight of their audience. The Experience never backed off, launching next into their first single "Hey Joe." Jimi had to do some quick tuning on the fly, but he pressed on undaunted, boldly dashing off a lick from the Beatles' "I Feel Fine" as he barreled through this uptempo rendition. This driving intensity built up after the solo, underscored by Jimi's rhythm guitar work and Mitchell's superb drumming before culminating in a rousing finale.
more >
Jimi Hendrix Experience: Live At Woburn CD
The Jimi Hendrix Experience: Live At Woburn is the eleventh release in the Dagger Records authorized 'bootleg' recording series. Live At Woburn presents a 100% previously unreleased concert recording capturing The Jimi Hendrix Experience in concert at the Woburn Music Festival on July 6, 1968. The Woburn Music Festival was one of Britain's first large scale, open-air rock music events. Staged by brothers Richard "Rik" and John Gunnell, who were well respected individuals in the burgeoning London music scene where they were heavily involved in many aspects including band managed, show promoters and club owners. Rik in particular, who owned three fashionable 1960's London nightspots—the Ram Jam Club, Flamingo, and Bag O' Nails—presented authentic, first generation American icons like John Lee Hooker and Otis Redding and some of the brightest examples of a swelling wave of emerging British talent such as The Rolling Stones, Jack Bruce and Georgie Fame.
more >
Jimi Hendrix Experience: Live In Ottawa CD
This unique, authorized 'bootleg' release features a raw, two-track mixing console recording of Jimi's March 19, 1968 concert in Ottawa, Canada. Jimi's appearance in Ottawa was part of an extensive US tour organized in support of his recently issued second album, Axis: Bold As Love. There is much to be relished in this unpolished recording. Jimi's train whistle feedback announces his powerhouse rendition of Howlin' Wolf's "Killing Floor". A stinging "Red House", Jimi's own blues masterwork, is even stronger. Live In Ottawa also presents the earliest live version of "Tax Free" issued to date.
more >
Jimi Hendrix Rainbow Bridge CD - Reissue
Originally released in 1971, Rainbow Bridge was compiled and mixed by Hendrix's longtime engineer Eddie Kramer and Experience drummer Mitch Mitchell with the help of Electric Lady Studios engineer John Jansen. Most of the tracks were recorded in 1969 and 1970, during the same sessions that spawned The Cry Of Love. Rainbow Bridge is often misconstrued as being an entirely live album, being that the film of the same name features excerpts of a live Jimi Hendrix performance in Maui. However, Hendrix had no role in the creation of the rambling, unfocused 1971 film which was directed by Chuck Wein. The film was not a Hendrix project in any way but instead an independent vision of his manager Michael Jeffery. After Hendrix's death in September 1970, Jeffery scrapped Hendrix's original vision of a double studio album titled First Rays Of The New Rising Sun and called for Kramer, Mitchell and Jansen to compile two posthumous albums—including one that would that would serve as a soundtrack for the Rainbow Bridge film. Beginning in the late 1990s, the tracks on The Cry Of Love and Rainbow Bridge were reassembled into various compilations, including First Rays of the New Rising Sun, South Saturn Delta, and The Jimi Hendrix Experience box set. Now, fans of all ages will be able to enjoy songs such as "Straight Ahead," "Nightbird Flying," and "Hey Baby (New Rising Sun)" as they were experienced when they first became available 43 years ago.
more >
Jimi Hendrix: Are You Experienced MONO Charcoal T-Shirt
60% cotton, 40% polyester.
more >
Jimi Hendrix: Jimi Plays Berkeley Blu-Ray
This special, expanded edition of Jimi Plays Berkeley showcases some of Jimi's finest ever performances filmed over two concerts at the Berkeley Community Theatre on May 30, 1970. The film documented the political unrest and student uprisings in Berkeley juxtaposed against such legendary Hendrix live performances as "Johnny B. Goode," "Star Spangled Banner," "I Don't Live Today" and "Purple Haze." Also includes: A new, digitally restored transfer from the original 16mm negative and more than fifteen minutes of newly discovered, previously unseen documentary and performance footage of such classic songs as "Voodoo Child (Slight Return)," "Machine Gun" and "Hear My Train A Comin'" not featured in the original film release.
more >
Cart Quantity:
Cart Subtotal:
View Cart
Privacy Policy
Terms of Use
Site Map
Discover is not accepted in all stores.
Questions or concerns?
Online Help
Email Customer Service
(Toll Free) 855-883-9504 | 434-205-7049 (International)
M-Th 9am - 12am EST | Fri 9am - 8pm EST
Copyright © 2015 All Rights Reserved. Delivery Agent, Inc. is the seller of all Authentic Hendrix - The Official Jimi Hendrix Online Store merchandise and is solely responsible for all aspects of your purchase.
JOIN OUR MAILING LIST AND SAVE 15% ON YOUR NEXT ORDER. Enter your email below and be the first to know about new products, exclusive offers & more. Your discount coupon will be delivered to the email address you provide.
Privacy Policy


text:
Topic Options
- Subscribe to RSS Feed
- Mark Topic as New
- Mark Topic as Read
- Float this Topic to the Top
- Printer Friendly Page
PlayStation MVP
Registered: 04/26/2007
11590 posts
Re: PS2 online game play
Sep 29, 2012
There should still be some. For one, Ratchet and Clank: Up Your Arsenal has recently reopened its servers for the HD trilogy's release. Madden of course comes around bringing football joy into online players' homes each year. Other than those it would be hard to pinpoint anything else still going on in online gaming. Zipper Interactive, makers of the SOCOM series, was eventually shutdown. The PlayStation 2 didn't have as wide a range of online games to speak of in comparison to today's current market.
PlayStation MVP
Registered: 08/15/2003
8502 posts
Re: PS2 online game play
Oct 16, 2012


text:
- Product Information
Product Description
Get your picture taken with the POTUS! Our 6' tall President Obama stand up is perfect for classrooms and other educational and political environments. President Barack Obama stands behind a podium with the Presidential seal. Our life size cardboard stand up of President Obama is sold per cutout. Please order in increments of 1 cutout.
- Due to size, this item may be costly to ship.
- Questions & Answers
- Reviews
Customer Reviews
- president obama cardboard stand up Review by chef les
product was used by culinary class for final project, president's day service. pictures taken with stand up. everyone enjoyed time with the president.
(Posted on 3/8/12)
- excellent everyone liked it. Review by tom
product was exactly what it was described, worked perfectly.
(Posted on 12/29/11)
Write Your Own Review
Create a Spooky Scene Outside Your Home with Halloween Decorations
We offer a wide selection of Halloween decorations in a variety of horror themes. Use this guide to help you choose the perfect decorations to make your home the most popular trick-or-treating destination this year!
Prepare for Your Breast Cancer Awareness Event with Pink Ribbon Party Supplies
Browse our selection of pink and pink ribbon items to decorate for, or giveaway, at your Breast Cancer Awareness event!
Switch up Your Annual Halloween Celebrations with a Day of the Dead Party!
Tired of going to the same Halloween parties year after year? Shake things up a bit with a classy Day of the Dead celebration! Follow these party tips and ideas for setting up your own Dia de los Muertos Party.


text:
You have not viewed any products recently.
Navigate to:
Land's End Business Outfitters
OR call 1-800-338-2000
Select the product you want the Military Branch logo on.
Our customer number is 4958781
Give LOGO #1226652W
Billing and shipment will go to the individual. There is an $8.50 logo fee in addition to product cost.
The Military Branch covers safety topics relevant to active duty, reserve and National Guard members and their civil service counterparts. Operational, fleet and off-duty safety are covered since the branches of the military share common risks and exposures not generally seen outside the military services. The Military Branch was established in 2010 and develops rich technical content delivered via publications, conference material, virtual events and much more. The Military Branch is led by a strong volunteer advisory committee that is available to help members learn and grow. The Branch also offers several networking opportunities for members to take advantage of. The Military Branch is sponsored by the Public Sector Practice Specialty and allows members to maximize their ASSE membership through targeted resources. Branch membership is open to all ASSE members. Contact customer service with any questions.
The American Society of Safety Engineers (ASSE) is pleased to offer reduced dues to members who are:
NOTE: Proof of active service will be requested in order to receive this offer.
Military Member Benefits Include:
For details, download the flyer. Feel free to pass it along to others who may be qualified to receive this benefit.
Chair: Chris Gates
Vice Chair: Robert Barnette
Content Coordinator: Shawn Lewis
Secretary: Brenda Smith
Membership Chair: Joshua Franklin and Jason E. Aucoin
Awards & Honors Chair: Brenda Smith
Professional Development Chair: Pamela S. Wilkinson
Body of Knowledge Chair: Jack Fearing
Website/Social Media Chair: Robert Barnette
Join Now Join us on LinkedIn Members Portal
View new and archived practice specialty, branch and common interest group publications in Members Only under Resources.
Customer Service (M-F 8:30am - 5:00pm)
+1 847 699.2929
American Society of Safety Engineers
520 N. Northwest Hwy
Park Ridge, IL 60068


text:
"little black dress and Women Black Dresses" we found 2 items!
Sort By
Choose a
- Product Type
Sort By
Your Selections:
We adjusted your search results to be more relevant. Not what you were looking for? Click here.
Ted Baker Elnor Burn Out Stripe Shirt Dress $315.00 Jack by BB Dakota Remus Printed Stripe Dress $57.00


text:
Catch 2015's best bite-sized masterpieces the world around at this mini-movie ...
Cape Town Cycle Tour
The world's largest individually timed cycling race set to go on with 'drastically shortened route' due to Cape fires
The Cape Town Cycle Tour (formerly known as the Cape Argus Pick n Pay Momentum Cycle Tour) will see still see scores of cyclists from all over the globe gear up for the largest individually timed cycling event in the world on Sunday, 8 March 2015 despite devastating Cape wildfires.
The route, which is normally 109km, has been "drastically shortened" to 47km in order to ensure cyclists' safety in the face of the still-blazing fires and possible subsequent natural dangers – e.g. the expansion of and therefore instability of rocks along the Chapman's Peak roadside.
The change is unprecedented in 38 years of racing history, and organisers have called on participants to treat the challenge as a "Show You Care Solidarity Ride" in support of the brave men and women who have risked their lives to battle infernos that have wreaked havoc on the Southern Peninsula.
The starting line for the 2015 race will still be Hertzog Boulevard at the Cape Town Civic Centre, and the route will take riders onto the N2 and down the M3 before looping back around and returning to a slightly altered finishing line in Green Point.
Entry for the 2015 Cape Town Cycle Tour opens on Friday, 26 September 2014, and applications can be lodged via the CycleTour.co.za website. The race's capacity is set at 35 000 cyclists, and once this limit has been reached, entries will no longer be accepted. There is a R30p/p discount on entry fees for Pedal Power Association (PPA) members.
South African Entries
Africa Entries (including Mauritius)
International Entries
Corporate and Charity Group Entries
Consult Cycletour.co.za for more information.
Do note that entry fees do not include RaceTec chips; these timing devices must be purchased separately.
AGE RESTRICTIONS: In order to compete in the cycling race, participants must turn 13 years old in the year of the event, and children accompanying parents on the back of a tandem must be 11 years of age or older. For more rules and regulations, consult Cycletour.co.za.
SEEDING EVENTS: For those interested in increasing their seeding index for future cycle tours, a number of seeding events are still to come for the 2015 race; for more information, visit Cycletour.co.za or follow @CycleTourTrust on Twitter for regular updates.
REGISTRATIONS: Registration for the 2015 Cape Town Cycle Tour will take place at the annual Cape Town Lifecycle Expo at the Good Hope Centre in the week before the race. Riders can collect race packs on behalf of one another; please make sure that the absent cyclist has a RaceTec chip, otherwise they will not be allowed to access the start of the race. Do note that registration will NOT take place on the day of the race.
- The fastest men's record was set by Robbie Hunter in 2008; who completed the 110-km course in 02:27:29.
- The fastest women's record was set by Anke Erlank-Moore in 2007; who completed the 110-km course in 02:48:29.
- The fastest average speed of 47.48-km/h was set by Wimpie van der Merwe in 1993.
- Penny Krohn set the record for the highest number of consecutive wins – 25 – within an age group.
- The oldest man to complete the race within the allotted time (7 hours) was Japie Malan who did the race on a single bicycle in 2010 and on a tandem in 2012. He was 92 years old at the time.
- Mary Warner is the oldest woman to complete the race within the allotted time (7 hours), in 2006; she was 80 years old at the time.
Check out our overview of annual March events to find out about more hot happenings taking place during the month.
Check out our events section for an up-to-date overview of happenings in Cape Town. Also, don't forget to subscribe to our newsletter and if you have a smartphone, add m.capetownmagazine.com to your home screen for quick access on the go!
Follow us on Twitter, like us on Facebook, join our Google+ circle, connect with us on LinkedIn, check out our photos on Instagram and follow our Pinterest boards for updates on what's happening in and around the Mother City!


text:
Native Plants
Q. Who is Mr. Smarty Plants?
A: There are those who suspect Wildflower Center volunteers are the culpable and capable culprits. Yet, others think staff members play some, albeit small, role. You can torture us with your plant questions, but we will never reveal the Green Guru's secret identity.
Did you know you can access the Native Plant Information Network with your web-enabled smartphone?
Ask Mr. Smarty Plants is a free service provided by the staff and volunteers at the Lady Bird Johnson Wildflower Center.
Need help with plant identification, visit the plant identification page.
rate this answer
Sunday - March 13, 2011
From: Yardley, PA
Region: Mid-Atlantic
Topic: Privacy Screening
Title: Screening trees for PA
Answered by: Anne Bossart
QUESTION:We are looking to plant some privacy trees in back of our home. Since our neighbor is directly behind us but we don't want to plant something distasteful to our neighbor. Do you have a recommendation?
It is hard to determine exactly what you are looking for because of the wording of your question. Is it correct to assume that it could be perceived as un-neighborly to plant a solid wall of green along your back property line?
In that case you can plant groupings of evergreen trees and small deciduous flowering trees that are strategically placed to screen parts of the yard. Determine which sight lines you would like to block (for example your patio and their deck or their kitchen window or their upstairs window). Those lines will help you determine which type of tree you need to plant, and where. Keep in mind that an evergreen tree is generally broader at the base than at the top and a decidous tree is the opposite (and doesn't offer much screen in the wintertime). Plants that are placed at the property line need to be much larger than those planted closer to your seating area in order to provide screening. You might want to ask a designer for some help with this (many of the larger nurseries in your area will provide this service if you are buying plants from them).
You live in a part of the country where the possibilities are almost limitless but here are a few suggestions:
Large evergreens:
Chamaecyparis thyoides (Atlantic white cedar)
Pinus strobus (Eastern white pine)
Thuja occidentalis (Arborvitae)
Ornamental decidous trees:
Amelanchier laevis (Allegheny service-berry)
Cercis canadensis (Eastern redbud)
Magnolia virginiana (Sweetbay)
Oxydendrum arboreum (Sourwood)
Smaller evergreens:
Kalmia latifolia (Mountain laurel)
Morella pensylvanica (Northern bayberry)
And if you are not concerned about screening in the wintertime, the possibilities using deciduous flowering shrubs are almost endless! If you visit our Native Plant Database and do a Combination Search selecting Pennsylvania, the plant type (tree, shrub and so on) and your conditions, it will generate a list of suitable plants native to your area. Each plant is linked to a detailed information page.
More Privacy Screening Questions
Screening plant for wall in Florida
February 26, 2010 - Hi Mr. Smarty Pants, I live near Tampa, FL and I want to put a line of privacy plants/hedges along a brick wall. The wall is 6' high with openings in the top 3' of the wall. The length of the w...
view the full question and answer
Replacement for Amber Jubilee Ninebark in California
November 22, 2014 - AMBER JUBILEE bush separating my neighbor and me, is spreading its roots into our water pipes. Want to rip out. What plants are root friendly and also give you privacy?
view the full question and answer
Need evergreen privacy screen for Austin, Texas
October 11, 2010 - I need an evergreen privacy screen. I live in southern Travis County and have a 450 ft property line that has a view to about 10 -12 neighbors back yards. I need something that won't be nibbled by ...
view the full question and answer
Need plant suggestions for a 700' long privacy screen in Wimberley, TX.
May 27, 2011 - I live in Wimberley. Tx Dot has ruined 700' of my side yard's (& back yard's) privacy by clearing all the plants/trees that had grown up in their right of way adjacent to our property. They're als...
view the full question and answer
Large evergreens for screen in Seattle
November 20, 2010 - Our building would like large evergreens to help with freeway noise (it's right across the street with a large green belt around it.) Which Northwest Evergreens would work best? We need tall and wide...
view the full question and answer
|Support the Wildflower Center by Donating Online or Becoming a Member today.
Mr. Smarty Plants wants you to be his Facebook friend. Click the Facebook icon to add yourself to Mr. Smarty Plants list of friends.


text:
Australian Wildlife and Nature Tours IN THE WILD
Experience Australia's unique wild animals in their natural environment! Feel the excitement as a wild Kangaroo mob hops past you, fast and free across their grassland. Connect with a wild Koala as she looks down at you, curious. Search a wilderness river for Platypus, listen for the perfect mimicry of Lyrebirds, photograph a huge flock of Cockatoos flying overhead.
For an authentic, responsible Aussie experience our animals have to be seen IN THE WILD.
Spend your vacation experiencing Australia at its best with Echidna Walkabout - Australia's world-recognised nature and wildlife tour operator.
Update July 2015
We have been nominated again and are finalists for the People's Choice Award at the World Responsible Tourism Awards this year.
This time it is the public who choose a winner from nine of us from around the world who have all been previous winners. So thrilled to be included in this group. A huge thank you to everyone who voted for us.
Gold award winner for Best in Wildlife Conservation at the World Responsible Tourism Awards in London November 2014.
On ALL our tours you will be helping to conserve wildlife and improve wildlife habitat.


text:
Keidrych Rhys
1 portrait
© National Portrait Gallery, London
Keidrych Rhys
by Ida Kar
vintage bromide print, circa 1945
9 3/8 in. x 7 1/2 in. (237 mm x 190 mm) overall
Purchased, 1999
Photographs Collection
NPG x131169
Click on the links below to find out more:
Sitterback to top
- Keidrych Rhys (William Ronald Rees Jones) (1915-1987), Poet, writer and editor of 'Wales'. Sitter in 14 portraits.
Artistback to top
- Ida Kar (1908-1974), Photographer. Artist associated with 1514 portraits, Sitter in 137 portraits.
Portrait setback to top
Subject/Themeback to top
Tell us moreback to top
Can you tell us more about this portrait? Spotted an error, something missing, or do you know anything that we don't know? If you have any information to share please complete the form below
Related pages
Events programme
- Weekend Workshop: The Quest for Reality: Giacometti & Uglow
From 14 November, 11:00
- Sunday Session: Abandoning the Real
1 November, 13:00
- Lecture: Giacometti: Pure Presence
12 November, 19:00
- Lecture: Inside Giacometti's Studio
22 October, 19:00


text:
- Dow Jones & Co. discloses breach, incident likely related to Scottrade
- Apple pulls the plug on in-app ad-blockers
- Comcast Xfinity Home subscribers can now add Nest thermostats and other connected-home devices
- Apple removes apps from store that could spy on your data traffic
- Android phones patched once a year, 87 percent exposed. Which brand is the most secure?
Case Study| Enabling real-time data-driven decisions
Case Study demonstrating how Arkansas Department of Education resolved load and error delays, gained efficiency, performance and a 20% increase in data transfer through implementing DataDirect Platinum drivers. Read on
Please supply your email address to access the content.
Market Place
- The role of chief digital officer: Destined to become redundant?
- ADMA bases new code of conduct on self-regulation and customer centricity
- Listen and act on customer data, not competitor intelligence, says Pandora MD
- ANZ CTO: Digital disruption is fundamental change accelerated
- Facebook 'Reactions' test adds six emojis to the Like button


text:
By Terence McArdle Sept. 8 (Washington Post) -- John W. Kluge, 95, a self-made billionaire who became one of the leading entrepreneurs of his generation and a major benefactor of the Library of Congress and Columbia University, died Sept. 7 at his home near Charlottesville. His death was confirmed by the University of Virginia, which was also a major recipient of his largesse. No cause of death was reported. Mr. Kluge said he accumulated more than 200 companies in his lifetime, including seven television stations he sold to Rupert Murdoch in the mid-1980s, forming the foundation of the Australian media owner's Fox network. The stations were part of Mr. Kluge's Metromedia telecommunications conglomerate, which at various times counted among its holdings the Ice Capades, Harlem Globetrotters, Playbill magazine and a billboard advertising company. Publicity shy much of his career, Mr. Kluge quietly began
News Corp.'s Fox network will go off the air and become a cable channel if U.S. courts don't stop Internet startup Aereo Inc. from retransmitting shows like "The Simpsons" without permission, said Chief Operating Officer Chase Carey.
The Los Angeles Dodgers can't shop the rights to televise the team's baseball games to new bidders while a court considers a challenge by Fox Sports, the club's current broadcaster, a district judge ruled.
News Corp.'s Fox Networks Group will seek a Japanese government license for a second channel to offer a digital satellite broadcasting service it wants to start next year, Nikkei English News reported, citing an interview with Fox Networks Chief Executive Officer Tony Vinciquerra.
Billionaires Rupert Murdoch and Barry Diller are squaring off in what's fast becoming a struggle for the future of television.
Sony Corp. will begin testing an Internet-based pay-television service in the U.S. this year, bringing live and on-demand programming to TVs and its PlayStation game consoles.
Hulu LLC, the video streaming service controlled by Walt Disney Co. and 21st Century Fox Inc., named Fox Networks distribution president Mike Hopkins as its chief executive officer after a months-long search.
The opening game of Major League Baseball's World Series attracted 15 million viewers to the Fox network and was the most-watched show last night, the broadcaster said.
Guggenheim's Gallant Discusses Fox, Aereo Battle


text:
First the bad news: In a blog post, Sony on April 21 said the PlayStation Network (PSN) cloud outage could linger for "a full day or two" before the service is "completely back up and running." CNN and other web sites speculate that hackers took down Sony PSN. Either way, it could be a long weekend for frustrated PSN online (er, offline) gamers.
Meanwhile, Amazon also suffered a glaring web outage this week. But investors seem to be shrugging off the short-term bump and focusing on Amazon's long-term cloud opportunity: Amazon shares are training near a 52-week high -- as are many other cloud stocks. A range of tech companies -- VMware, IBM and Intel, F5 and EMC, to name a few -- delivered strong quarterly results this week.
We'll be updating the Talkin' Cloud Stock Index this weekend with the latest performance indicators.
Follow Talkin' Cloud via RSS, Facebook and Twitter. Sign up for Talkin' Cloud's Weekly Newsletter, Webcasts and Resource Center. Read our editorial disclosures here.


text:
ENT: To Brave the Storm by Michael A. Martin Review Thread (Spoilers!)
View Single Post
November 3 2011, 09:36 PM
Re: Enterprise: The Romulan War: To Brave the Storm review thread
Deranged Nasat wrote:
ex Zane Gray wrote:
MatthiasRussell wrote:
I'm glad the overabundance of side stories involving forgettable characters and the author's philosophical musings about warfare that plagued "Beneath the Raptor's Wings" are not in this book.
Totally disagree about this. That's one of the things I liked about
Raptor's Wing
- the scope covering multiple characters and storylines. That's part of what made that book really - for me at least - feel worthy of a conflict as big as the Romulan War. The problem for me about this book - on that score at least - is that there wasn't enough time or space to continue that in a way that paid off all the stories.
As for "the author's philosophical musings"... that's part of being an author. Every writer brings his or her own feelings and thoughts and perspective into their writing. While some of your criticisms are certainly fair, I think you're being a bit overly harsh against Martin in particular. Honestly, he was making the best of a bad situation (having the trilogy cut down by the editors) and I think he did the best he could. It's not my favorite book in the series, and I'm disappointed that it doesn't pay off the promise raised by
Raptor's Wing
, but Martin did a creditable job.
I'd second this, if I may.
Ditto I totally agree about Micheal making the best he could of a unfair situation when it came to the editors making him cut out large sections with important character scenes in the latest Enterprise Romulan war novel.I want to see him write another novel that would explain the missing scenes we weren't able to have near the end of To Brave the storm.
View Public Profile
Send a private message to Reanok
Find More Posts by Reanok


text:
Blazej J. Kot is escorted into the Tompkins County Courthouse in 2010.
- Filed Under
Convicted murderer Blazej Kot on Friday told Tompkins County Judge John C. Rowley he remains remorseful for the killing of his wife and that he is receiving help for his mental health issues.
Kot appeared in County Court on a re-sentencing appeal regarding two of the charges against him.
Kot, 29, is serving 25 years to life for fatally stabbing his wife, Caroline Coffey, on the Black Diamond Trail near their Town of Ithaca apartment on the evening of June 2, 2009, and setting fire to the apartment to cover up the deed. ...


text:
Products in the News
ROHM High-Performance Switching Regulator Controllers Compatible with FPGA Power Supply RequirementsAugust 12, 2015
The first components from a Japanese manufacturer adopted into the power supply module for Xilinx's FPGA evaluation kit ROHM has recently announced that its power supply module has been selected for use with Xilinx's 7 Series FPGAs and in its Zynq ®-7000 All Programmable SoC evaluation kit. This power supply... Read More
Unidrive M Enables Render Technology to Push the LimitsAugust 12, 2015
Render Technology, a specialist in the manufacture of end-of-line handling and palletising machines for the packaging market, has switched its drives partner to Emerson. The business has seen productivity of its machines increase by 20% as a result of using Emerson's Control Techniques Unidrive M variable speed... Read More
Eurocom Announces Plans of Supporting Socket Based Skylake Intel Core i7-6700K CPUs in Line of High Performance LaptopsAugust 11, 2015
Eurocom is announcing plans to support socket based Intel Skylake desktop 6th Gen Intel® Core™ i7-6700K processors in a line of high performance, fully upgradeable, LGA 1151 socket based laptops. "Our customers can again combine the most advanced power of socket based, desktop Intel processors and high performance... Read More
mycon GmbH and Sister Company Kipp Umwelttechnik Receives Certification for Self-developed Cold Storage Cleaning ProcessAugust 11, 2015
Cleaning process enables cost and time effective cold storage cleaning during running operation Cold store cleaning by applying mycon GmbH and its sister company Kipp Umwelttechnik had its self-developed "Coldclean" cleaning agent and the application process for cleaning refrigerated warehouses examined and tested... Read More
Elbit Systems Awarded an Approximately $45 Million Contract for the Supply of Military Communications Systems to a European CountryAugust 11, 2015
HAIFA, Israel — Elbit Systems Ltd. (NASDAQ and TASE: ESLT) ("Elbit Systems") announced today that it was awarded an approximately $45 million contract from a European country for the supply of military communications systems. The contract will be performed over a two-year period. The mobile communications systems... Read More
Severtson Screens Features TAT-4K & SAT-4K Acoustically-Transparent Projection Screens at 2015 CEDIA ExpoAugust 11, 2015
Now Shipping, the Made in the USA TAT-4K Offers the Same Innovative Technology as Severtson's Acclaimed SAT-4K Screens, but for Home Theater and Commercial Settings with Incoming Ambient Light, Meeting and Exceeding All Industry Standards for Optimum Acoustic Performance Mesa, Ariz. — Severtson Screens... Read More
Tegile Executives Discuss How to Get the Best of Both Worlds with Hybrid, All-Flash Arrays at Flash Memory SummitAugust 11, 2015
NEWARK, Calif. — Tegile Systems, the leading provider of flash-driven storage arrays for databases, virtualized server and virtual desktop environments, today announced that company CEO Rohit Kshetrapal and product marketing manager Chris Tsilipounidakis are featured speakers at Flash Memory Summit taking place... Read More
Weathering The Storm: Hurricane Planning, Response and Recovery with SWS Environmental ServicesAugust 11, 2015
Every year hurricanes and tropical storms have the potential to cause disruption, damage and even devastation to businesses of all sizes. Learn more about planning and preparation, which are essential to "weathering the storm." Fort Lauderdale, Florida – On June 1st the 2015 hurricane season will be official... Read More
SWS Environmental Services Deployed for Tropical Storm Bill Disaster Response and Flood Recovery throughout TexasAugust 11, 2015
Crews from various Texas locations are working closely with businesses and state officials to manage the effects of Tropical Storm Bill Houston, Texas – Texas is feeling the effects of hurricane season already with the first Gulf of Mexico tropical storm. Tropical Storm Bill made landfall hitting areas of Galveston... Read More
Integral Technologies to Exhibit at the Battery Show 2015August 11, 2015
CANTON, Mich., – Integral Technologies, Inc. (OTC-BB: ITKG) ("Integral"), an emerging light-weighting leader and its wholly owned subsidiary ElectriPlast Corp., will be exhibiting at Booth #1856 at The Battery Show 2015, and Electric Hybrid Vehicle Conference and Expo from September 15-17th at the Suburban... Read More
U.S. Debut among Hyundai WIA Machine Center Technology on Display at WESTEC, Booth #1515August 11, 2015
Itasca, IL – Hyundai WIA Machine America will have multiple CNC machines on display at WESTEC in booth #1515. The event will be the first time the new and improved F500 Plus vertical machining center is displayed in the U.S. In addition to vertical machining, product experts will host demonstrations of the latest... Read More
Stahlin Non-Metallic Enclosures Celebrates 30-Year Partnership with TWR Lighting, Inc.August 11, 2015
The Situation TWR Lighting, Inc., for 34 years has been a worldwide leader in specialized hazard and aviation obstruction lighting products and services. The company's mission is to continually improve products and services, thereby allowing their customers to prosper by providing a reasonable return for their... Read More
Hydrogenics to Supply Three Electrolyzers and 100 kw Fuel Cell System for Levenmouth Community Energy Project in ScotlandAugust 11, 2015
MISSISSAUGA, Ontario, – Hydrogenics Corporation (NASDAQ:HYGS) (TSX:HYG) a leading developer and manufacturer of hydrogen generation and hydrogen-based fuel cell power modules, today announced that it has been awarded a contract to supply three electrolyzers and a fuel cell power module system for the Levenmouth... Read More
Eaton's Energy-Efficient LED Lighting Solutions Help Denver and Detroit Airports Win Three Lighting Energy Efficient in Parking Campaign AwardsAugust 11, 2015
PEACHTREE CITY, Ga. – Power management company Eaton announced that the U.S. Department of Energy's Better Buildings Alliance's Lighting Energy Efficient in Parking (LEEP) Campaign recognized the Denver International Airport (DIA) and Detroit Metropolitan Airport (DTW) for upgrading its parking garage lighting with... Read More
Farpointe to Focus on Securing Contactless Card-Based Access Control Systems at ISC EastAugust 11, 2015
Protection from Skimming, Eavesdropping and Relay Attacks Sunnyvale, Calif., USA — Farpointe Data, a DORMA Group Company, the access control industry's trusted global partner for RFID solutions, today announced that attendees of the ISC East Show at the Jarvis Center North in New York City November 18-19 can learn... Read More
Omegasonics' Ultrasonic Cleaning Systems Receive CE MarkingAugust 11, 2015
Simi Valley, CA — Omegasonics, a global supplier of ultrasonic cleaning systems, today announced that two of its cleaning units for the 3D printing market now have CE Marking Certification, making them eligible for sale in the European Union. The CE Marking signifies that Omegasonics' SST4030 and 1900BT cleaning... Read More
NVision Influences Science behind Jurassic SeriesAugust 11, 2015
Southlake, TX — "3D scanning has helped provide some of the real science behind the Jurassic Park series," says Steve Kersen, President of NVision, Inc. "Paleontologist Jack Horner, a lead consultant on the series and inspiration for the series's character Dr. Alan Grant, bought his first 3D scanner from us when the... Read More
The Right Medicine for Replenishment and InventoryAugust 11, 2015
RELEX optimises Galexis' supply chain Galexis, the leading Swiss pharmaceutical wholesaler and logistics service provider, is to use RELEX's supply chain management software to reap the benefits of RELEX's automated replenishment while maximising transparency for sales campaigns and promotions. Galexis also expects... Read More
Emerson Motors and Drives Deliver Upgrade at Champagne ProducerAugust 11, 2015
Nicolas Feuillatte, the globally recognised champagne producer, has chosen Emerson to deliver improvements to its bottling line. The Centre Vinicole - Champagne Nicolas Feuillatte (CV-CNF) is the leading Champagne producers' union. It comprises 80 cooperatives and represents over 5,000 wine-growers. Its facility in... Read More
EVS Receives Significant Order for 19 iBarsAugust 11, 2015
Receives $600,000 order from a Chinese manufacturer EVS to report second quarter financial results on August 12 and host a conference call CAESAREA, Israel, – Elbit Vision Systems Ltd. (OTCBB:EVSNF), a pioneer in the science of camera-based automatic vision inspection for textile fabrics and technical webs... Read More


text:
John CopnallObituary: Painter with a bold use of colour who moved from stylised realism to abstraction.
Obituaries p36
Nina VyroubovaObituary: Dancer who kept the soul of Russian ballet alive in France.
Betty KempObituary: A constitutional historian whose wit and vivacity generated a distinguished coterie.
Alex MitchellObituary: My father Alex Mitchell, who has died in Dumfries aged 95, used his experience in the war - devising tests for officer selection - to develop his postwar career undertaking early research on the impact of television advertising.