1-8. (canceled)
9. A pharmaceutical composition comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or a pharmaceutically acceptable form thereof and a pharmaceutically acceptable carrier therefor, wherein said particulate form is comprised of particles having a volume mean diameter with a median value within the range 500 nm to 5 micrometres.
10. The pharmaceutical composition according to claim 9, wherein the median value of the volume mean diameter of the particles is less than 1 micrometre.
11. The pharmaceutical composition according to claim 9, wherein the median value of the volume mean diameter of the particles is in the range of from 500 nm to 1000 nm.
12. The pharmaceutical composition according to claim 9, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione maleate.
13. The pharmaceutical composition according to claim 9, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione.
14. A controlled release pharmaceutical composition comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or a pharmaceutically acceptable form thereof and a pharmaceutically acceptable carrier therefor, wherein said particulate form is comprised of particles having a volume mean diameter with a median value within the range 500 nm to 5 micrometres and wherein the carrier is selected to provide a controlled release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
15. The controlled release pharmaceutical composition according to claim 14, wherein the median value of the volume mean diameter of the particles is less than 1 micrometre.
16. The controlled release pharmaceutical composition according to claim 14, wherein the median value of the volume mean diameter of the particles is in the range of from 500 nm to 1000 nm.
17. The controlled release pharmaceutical composition according to claim 14, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione maleate.
18. The controlled release pharmaceutical composition according to claim 14, comprising a particulate form of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione.
modified release include delayed, pulsed, and sustained release, either alone or in any combination.
19. The controlled release pharmaceutical composition according to claim 14, wherein the carrier provides a delayed release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
20. The controlled release pharmaceutical composition according to claim 19, comprising a gastric resistant polymer selected from methacrylates, cellulose acetate phthalate, polyvinyl acetate phthalate, hydroxypropyl methylcellulose phthalate.
21. The controlled release pharmaceutical composition according to claim 14, wherein the carrier provides a sustained release of 5-4-2-(N-methyl-N-(2-pyridyl)amino)ethoxybenzylthiazolidine-2,4-dione, or pharmaceutically acceptable form thereof.
22. The controlled release pharmaceutical composition according to claim 21, wherein the carrier comprises a disintegrating, non-disintegrating or eroding polymer selected from methacrylates, cellulose acetates, hydroxypropyl methylcellulose phthalate, and ethylcellulose.
The claims below are in addition to those above.
All refrences to claim(s) which appear below refer to the numbering after this setence.
1. A computer system, comprising:
an authentication server;
a client in remote communication with the authentication server; and
at least one secure resource in communication with the client;
wherein the client is configured to store on the client a first authenticated credential received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the credential; and
wherein the client is configured to use the stored first authenticated credential to access the at least one secure resource without further authenticating the first credential with the server or other authenticating entity while the authentication server is not in operative communication with the client.
2. The computer system of claim 1, further comprising a secure gateway machine connected between the authentication server and the client;
wherein the gateway machine is configured to store a second authenticated credential on the gateway received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the second credential; and
wherein the client is further configured to use the second authenticated credential to access the at least one secure resource without further authenticating the second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
3. The computer system of claim 2, wherein at least one of the client security method and the gateway security method is encryption, and wherein the client is further configured to decrypt the first credential or the second credential, determine whether the decrypted credential has been tampered with, and fail a user authentication request if decrypted credential has been tampered with.
4. The computer system of claim 3, wherein at least one of the client security method and the gateway security method is Public Key Infrastructure, and wherein the client is further configured to decrypt the first credential or the second credential with a key stored on the client, determine whether the decrypted credential has been tampered with, and fail a user authentication request if decrypted credential has been tampered with.
5. The computer system of claim 3, wherein the client is further configured to use the second authenticated credential prior to using the first authenticated credential in accessing the at least one secure resource without further authenticating either first or second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
6. The computer system of claim 3 wherein the authenticated user credential is a light-weight directory access protocol.
7. A method for providing access to at least one secure resource, comprising the steps of
storing a first authenticated credential received from an authentication server in remote communication via a secure gateway with a client on the client in response to a successful user authentication by utilizing a security method to prevent tampering with the first credential;
submitting a user authentication request to the authentication server; and
in response to the user authentication request, the client using the stored first authenticated credential to access the at least one secure resource without further authenticating the first credential with the server or other authenticating entity while the authentication server is not in operative communication with the client.
8. The method of claim 7, further comprising the steps of:
providing a secure gateway machine connected between the authentication server and the client;
the gateway machine storing a second authenticated credential on the gateway received from the authentication server in response to a successful user authentication by utilizing a security method to prevent tampering with the second credential; and
the client using the second authenticated credential to access the at least one secure resource without either the client or the gateway further authenticating the second credential with the server or other authenticating entity while the authentication server is not in operative communication with the gateway.
9. The method of claim 8, wherein at least one of the client security method and the gateway security method is encryption, further comprising the steps of:
decrypting the first credential or the second credential;
determining whether the decrypted first or second credential has been tampered with; and
failing a user authentication request if the decrypted first or second credential has been tampered with.
10. The method of claim 9, wherein at least one of the client security method and the gateway security method is Public Key Infrastructure, further comprising the step of decrypting the first credential or the second credential with a key stored on the client.
11. The method of claim 10, wherein the step of using the second authenticated credential to access the at least one secure resource without further authenticating said second credential while the authentication server is not in operative communication occurs prior to the step of using the first authenticated credential to access the at least one secure resource without further authenticating said first credential while the authentication server is not in operative communication.
12. The method of claim 12 wherein the authenticated user credential is a light-weight directory access protocol.
13. A method for providing access to at least one secure resource, comprising the steps of:
submitting a user authentication request to an authentication server in remote communication via a secure gateway with a client in use by said user;
in response to a successful user authentication of the user authentication request, receiving an authenticated user credential which is unique to said user, storing said authenticated credential on said client utilizing a client security method, storing said authenticated credential on said gateway utilizing a gateway security method, and using said authenticated credential to access said at least one secure resource;
in response to an unsuccessful user authentication of the user authentication request, determining whether said authentication server is in operative communication with said client;
in response to a determination that said authentication server is in operative communication with said client, erasing from the client any authenticated credential corresponding to said user, erasing from the gateway any authenticated credential corresponding to said user, and failing the user authentication request;
in response to a determination that said authentication server is not in operative communication with said client; determining whether said gateway is in operative communication with said client, and:
in response to a determination that said gateway is in operative communication with said client, searching the gateway for an authenticated credential corresponding to said user, and:
in response to finding an authenticated credential corresponding to said user on the gateway, using said authenticated credential to access said at least one secure resource without further authenticating the credential with the server or gateway or other authenticating entity; or
in response to not finding an authenticated credential corresponding to said user on the gateway, failing the user authentication request; or
in response to a determination that said gateway is not in operative communication with said client, searching the client for an authenticated credential corresponding to said user; and
in response to finding an authenticated credential corresponding to said user, using said authenticated credential to access said at least one secure resource without further authenticating the credential with the server or the gateway or another authenticating entity while said gateway is not in operative communication with said client; or
in response to not finding an authenticated credential corresponding to said user, failing the user authentication request.
14. The method of claim 13, wherein at least one of said gateway and client security methods is encryption of the credential, further comprising the steps of:
decrypting the credential;
determining whether the decrypted credential has been tampered with; and
failing the user authentication request in response to a determination that the decrypted credential has been tampered with.
15. The method of claim 14 wherein the authenticated user credential is a light-weight directory access protocol.
16. The method of claim 14, the wherein at least one of the steps of using said authenticated credential to access said at least one secure resource further comprises the steps of:
determining an elapsed time since a previous remote server authorization;
comparing the elapsed time to a threshold time; and
in response to the elapsed time exceeding the threshold time, failing the user authentication request.
17. The method of claim 14 further comprising the steps of:
assigning a high sensitivity level or a low sensitivity level to the at least one secure resource; and
failing the user authentication request if the at least one secure resource sensitivity level is the high sensitivity level unless the authenticated credential is found on either the server or the gateway.
18. The method of claim 14 wherein at least one of said gateway and client security methods is Public Key Infrastructure, further comprising the steps of:
decrypting the credential with a key stored on the client;
determining whether the decrypted credential has been tampered with; and
failing the user authentication request in response to a determination that the decrypted credential has been tampered with.
19. The method of claim 18 wherein said Public Key Infrastructure is hardware-based.