Abstract: Various embodiments of systems and methods for providing an expression of a resource for access control are described herein. One or more business security profiles associated with a user are received. The business security profile is defined including a resource expression. The resource expression can include a resource expression with a quantifier or the resource expression without a quantifier. Further, a net profile of the user is computed using symbolic calculus on the resource expression of the one or more business security profiles. The net profile of the user includes a set of granted resources and a set of denied resources. Based upon the computed net profile, access to a resource is authorized for the user.

Abstract: Various embodiments of systems and methods for providing an expression of a resource for access control are described herein. One or more business security profiles associated with a user are received. The business security profile is defined including a resource expression. The resource expression can include a resource expression with a quantifier or the resource expression without a quantifier. Further, a net profile of the user is computed using symbolic calculus on the resource expression of the one or more business security profiles. The net profile of the user includes a set of granted resources and a set of denied resources. Based upon the computed net profile, access to a resource is authorized for the user.

Abstract: Aspects may include determination of a first security profile associated with a user and an information space, the information space comprising metadata indicating a plurality of objects mapped to logical entities of a hierarchical data structure, reception of a request from the user for an interface for creating queries to the hierarchical data structure, and determination, based on the first security profile, of a first subset of the plurality of objects based on which the user is allowed to create queries. A query is executed based on one or more of the first subset of objects, data of the hierarchical data structure is received in response to execution of the query, a second subset of the received data which the user is allowed to view is determined based on the first security profile, and the second subset of the received data is presented to the user.

Abstract: Aspects may include determination of a first security profile associated with a user and an information space, the information space comprising metadata indicating a plurality of objects mapped to logical entities of a hierarchical data structure, reception of a request from the user for an interface for creating queries to the hierarchical data structure, and determination, based on the first security profile, of a first subset of the plurality of objects based on which the user is allowed to create queries. A query is executed based on one or more of the first subset of objects, data of the hierarchical data structure is received in response to execution of the query, a second subset of the received data which the user is allowed to view is determined based on the first security profile, and the second subset of the received data is presented to the user.

Abstract: Disclosed is a method and system for computing data security settings in a multi-dimensional system. The method includes receiving a query from a user to access a dataset, retrieving a membership tree of the user and determining a set of minimal branches of the membership tree. A minimal data security setting for the user is determined by computing a sum of products in the set of minimal branches. A data security setting for the user to access the dataset is determined based on the minimal data security setting and finally, the data security setting is embedded in the query to access the dataset.

Abstract: The invention relates to a process of detecting check sequences in a situation recognition system, composed of a list of events and time constraints. For each check sequence, a sequence of events and intervals between possible dates of occurrence of each of these events is created in memory. The process manages an internal clock differing from universal time, representing the current date of the system, updates the sequences of events for each situation upon each occurrence of a new event. This causes an updating of the current date, an updating for each sequence of events memorized of the intervals between possible dates of occurrences, detection of all the sequences of events for which one of these intervals is empty, creation of new sequences of events integrating this new event, and a detection of complete sequences.