摘要:
A method is disclosed for inducing cell-mediated immunity against cellular antigens. More specifically, the invention provides for a method for inducing cytotoxic T-lymphocyte immunity against weak antigens, notably self-proteins. The method entails that antigen presenting cells are induced to present at least one CTL epitope of the weak antigen and at the same time presenting at least one foreign T-helper lymphocyte epitope. In a preferred embodiment, the antigen is a cancer specific antigen, e.g. PSM, Her2, or FGF8b. The method can be exercised by using traditional polypeptide vaccination, but also by using live attenuated vaccines or nucleic acid vaccination. The invention furthermore provides immunogenic analogues of PSM, Her2 and FGF8b, as well as nucleic acid molecules encoding these analogues. Also vectors and transformed cells are disclosed. The invention also provides for a method for identification of immunogenic analogues of weak or non-immunogenic antigens.
摘要:
Disclosed are novel methods for combating diseases characterized by deposition of amyloid. The methods generally rely on immunization against amyloidogenic proteins (proteins contributing to formation of amyloid) such as beta amyloid (Aβ). Immunization is preferably effected by administration of analogues of autologous amyloidogenic polypeptides, said analogues being capable of inducing antibody production against the autologous amyloidogenic polypeptides. Especially preferred as an immunogen is autologous Aβ which has been modified by introduction of one single or a few foreign, immunodominant and promiscuous T-cell epitopes while substantially preserving the majority of Aβ's B-cell epitopes. Also disclosed are nucleic acid vaccination against amyloidogenic polypeptides and vaccination using live vaccines as well as methods and means useful for the vaccination. Such methods and means include methods for identification of useful immunogenic analogues of the amyloidogenic proteins, methods for the preparation of analogues and pharmaceutical formulations, as well as nucleic acid fragments, vectors, transformed cells, polypeptides and pharmaceutical formulations.
摘要:
Disclosed are novel methods for combating diseases characterized by deposition of amyloid. The methods generally rely on immunization against amyloidogenic proteins (proteins contributing to formation of amyloid) such as beta amyloid (Aβ). Immunization is preferably effected by administration of analogues of autologous amyloidogenic polypeptides, said analogues being capable of inducing antibody production against the autologous amyloidogenic polypeptides. Especially preferred as an immunogen is autologous Aβ which has been modified by introduction of one single or a few foreign, immunodominant and promiscuous T-cell epitopes while substantially preserving the majority of Aβ's B-cell epitopes. Also disclosed are nucleic acid vaccination against amyloidogenic polypeptides and vaccination using live vaccines as well as methods and means useful for the vaccination. Such methods and means include methods for identification of useful immunogenic analogues of the amyloidogenic proteins, methods for the preparation of analogues and pharmaceutical formulations, as well as nucleic acid fragments, vectors, transformed cells, polypeptides and pharmaceutical formulations.
摘要:
A method, apparatus and computer instructions for handling propagation of custom tokens without using Java™ serialization. A service provider may plug in a first login module to add a marker token to a subject for later use by an application at run time. The marker token is then serialized by the mechanism of the present invention by invoking a get bytes method on the token. The present invention then propagates the token downstream if the token is marked forwardable. At a target server, a second login module may be plugged in to deserialize a byte array from a list of tokens and perform custom operation on the byte array retrieved from a token holder.
摘要:
State management (cookie) data is encrypted so that access control data included in the cookie is unable to be modified by the user. A hashing algorithm is performed using various fields in the cookie data and the hash value is encrypted. The hash value is combined with other data such as the user identifier and a time stamp and encrypted to form a cookie value. When a request is received, the cookie data is checked. If the token value is not in the server's cache then the token is authenticated facilitating movement of the client between servers. If the cookie does not exist or is timed out, then the user is authenticated using traditional means.
摘要:
The present invention relates to a secure caching technique for shared distributed caches. A method in accordance with an embodiment of the present invention includes: encrypting a key K to provide a secure key, the key K corresponding to a value to be stored in a cache; and storing the value in the cache using the secure key.
摘要:
A system and method is provided for reducing the complexity and improving the performance of enforcing security restrictions on the execution of program code in a runtime environment. In a preferred embodiment, units of executable code, such as methods or functions, are classified by “security level.” Code units belonging to a “trusted” security level may call any other code unit in the runtime environment, but other security levels are restricted in the code units they can call. In a preferred embodiment, the security levels are represented by corresponding permission objects. Each permission object that is associated with a particular security level includes a numerical value that denotes that security level. Security policies can be enforced with respect to caller and callee code units by comparing numerical values of corresponding permission objects. This security level scheme also improves runtime performance by making it unnecessary to check individually-defined permissions in many cases.
摘要:
A method and system for providing a declarative trust association model that formalizes the way trust is established and requires corresponding authentication information to be presented in a standard format. Consequently, the application server may provide a guaranteed level of protection. The mechanism of the present invention provides a framework that allows an application server to enforce a trust evaluation and allows reverse proxy security server to assert a client's security identity, as well as other client security credential information. A known trust association interceptor model is extended to allow the reverse proxy security server to assert the authenticated user's security attributes. Such security attributes include, for example, group information, authentication strength, and location (i.e., where does the user enter the request, intranet vs. internet, IP address, etc.,). The security attributes can be used in making authorization decisions.
摘要:
A method and apparatus for preventing rogue implementations of a security-sensitive class interface are provided. With the method and apparatus, a unique identifier (UID) is created by a server process when the server process is started. Anytime the server process, i.e. a server runtime environment, instantiates a new credential object following start-up of the server process, the encrypted UID is placed into a private field within the new credential object. In addition, the UID is encrypted and stored in a private class of the server runtime environment. A verification class is provided within the server runtime environment which includes one or more methods that receive the credential object as a parameter and return true or false as to the validity of the credential object. These one or more methods determine the validity of the credential object by retrieving the encrypted UID from the private class stored in the server runtime environment, decrypting the UID and comparing it to the decrypted UID stored in the private field of the credential object. If the two UIDs match, a determination is made that the credential object was created by the server runtime environment rather than a rogue application. If the two UIDs do not match, or if there is no UID in the credential object, then a false result will be returned by the verification class.
摘要:
A device for exchanging heat comprising at least one fluid inlet (2), at least one header pipe (4), a plurality of flat pipes (5) at least at one end being in flow connection with the header pipe (4), a fluid outlet (9) and at least one frame element (21, 23) being in connection with the header pipe (4) wherein said connection between the frame element (21, 23) and the header pipe (4) is a frictional connection due to auxiliary equipment (33).