Abstract: A method for administering object-based multi-level security in a service oriented architecture includes: (a) defining a plurality of multi-level security attributes for each of selected respective life-cycle states of a plurality of life-cycle states of a service object; (b) receiving a request from a requestor for the service object; (c) determining permitted actions for the service object based upon at least one selected multi-level security attribute of the plurality of multi-level security attributes, and based upon at least one life-cycle state of the plurality of life-cycle states of the service object; and (d) generating a quality of service security contract based upon the determination of permitted actions.

Abstract: A method of managing resources of an information system relative to clients of the system. A quality of service (QoS) message is received from a client expressing QoS requirements as parameter values. A contract is established with the client for quality of service based on the one or more parameter values. One or more resources of the system are allocated to the client based on the contract. This method enables uniform resource management and polymorphic resource allocation across multiple middleware platforms.

Abstract: A method for administering object-based multi-level security in a service oriented architecture includes: (a) defining a plurality of multi-level security attributes for each of selected respective life-cycle states of a plurality of life-cycle states of a service object; (b) receiving a request from a requestor for the service object; (c) determining permitted actions for the service object based upon at least one selected multi-level security attribute of the plurality of multi-level security attributes, and based upon at least one life-cycle state of the plurality of life-cycle states of the service object; and (d) generating a quality of service security contract based upon the determination of permitted actions.

Abstract: Methods for using an exception handling system are provided for dynamically recovering from a workflow exception occurring in a healthcare mobile network communication system. An individual user can access the system through a hand-held mobile device. The system has multiple workflows and at least one mission critical item. Attack tree modeling analyses are performed to identify the mission critical item. Another operation includes writing a plurality of forward recovery rules to protect the mission critical item. The recovery rules are enabled through an engine in communication with the mobile network communication system. The multiple workflows are monitored for indication of a system attack on any one of the multiple workflows. A new workflow is automatically generated upon detection of the system attack. The exception handling system is overlayed on the mobile network. Authorization is provided by the system for the individual user.

Abstract: An exception handling system and method are provided for dynamically recovering from a workflow exception occurring in a mobile network communication system. The system has multiple workflows and at least one mission critical item. An attack tree modeling analyses is performed to identify the mission critical item. Another operation includes writing a plurality of forward recovery rules to protect the mission critical item using a transaction datalog fragment of transaction logic. The recovery rules are enabled through an engine in communication with the mobile network communication system. The multiple workflows are monitored for indication of a system attack on any one of the multiple workflows. A new workflow is automatically generated upon detection of the system attack. The exception handling system is overlayed on the mobile network.

Abstract: A method of managing resources of an information system relative to clients of the system. A quality of service (QoS) message is received from a client expressing QoS requirements as parameter values. A contract is established with the client for quality of service based on the one or more parameter values. One or more resources of the system are allocated to the client based on the contract. This method enables uniform resource management and polymorphic resource allocation across multiple middleware platforms.