Abstract: Securing a file against user actions in a computer network includes processing a request for a file-directed action that identifies a user, a file, and a mode of file access. Generating a mediated covenant of association that defines constraints of the user action and is produced by node-by-node informatic convolution of a hierarchy of informational nodes present in profiles of the user, the file and the mode. Enforcing securing of the user actions with a computer security event-specific model based on an instance of trust derived from the covenant of association.

Abstract: Securing a file against user actions in a computer network includes processing a request for a file-directed action that identifies a user, a file, and a mode of file access. Generating a mediated covenant of association that defines constraints of the user action and is produced by node-by-node informatic convolution of a hierarchy of informational nodes present in profiles of the user, the file and the mode. Enforcing securing of the user actions with a computer security event-specific model based on an instance of trust derived from the covenant of association.

Abstract: Entity aggregation for security computing resources involves an aggregation covenant that conditionally conveys rights to aggregation members. The ruling covenant is defined for protecting one or more computing resources by overriding system-level and/or entity-specific rights (e.g., super-users). An aggregation configuration module defines an aggregation-specific instance of an entity (user/device, process, or data) that receives the conveyed rights. The entity can use the rights conveyed only through its corresponding instance.

Abstract: Entity aggregation for security computing resources involves an aggregation covenant that conditionally conveys rights to aggregation members. The ruling covenant is defined for protecting one or more computing resources by overriding system-level and/or entity-specific rights (e.g., super-users). An aggregation configuration module defines an aggregation-specific instance of an entity (user/device, process, or data) that receives the conveyed rights. The entity can use the rights conveyed only through its corresponding instance.

Abstract: A transposable identity enchainment system for diffuse identity management processing entities for each of users, data, and processes equivalently and having a recombinant access mediation system that mediates association among entities, an associational process management system that creates entity-defining indices, and a multi-dimensional enchainment system that enchains aspects of entity identities via mediated association certificates including at least one root certificate for at least one of the entities.

Abstract: Synthesizing a control object for a computing event, the control object for securing a computing resource based on a set of access and privilege information provided through a set of mediated associations that are represented by an enchained set of certificates, portions of which are encrypted including entity-specific paths to entity-specific predecessor certificates and partial decryption keys therefor, wherein the control object is applied to secure the computing resource for performing a computing action indicated by a process-type entity identified in the certificate for the control object.

Abstract: Establishing event-specific trust through data-centric mediation by: generating a mediated covenant of association as an instance of trust among a plurality of entities at an association layer of a multi-layer computer security system; constructing a security model enforceable by the multi-layer computer security system that expresses node-node semantic relationships as links among nodes of the model representing protectable computing resources; and producing an event-specific security model via informatic convolution of elements of the covenant with elements of the security model, so that the event-specific security model is operable to constrain a computing action among computing resources represented by the plurality of entities.

Abstract: Diffusing a root identity of an entity among association and event covenants in a multi-dimensional computing security system involves generating a first generation of diffusion of identities of entities participating in mediated association and generating a second generation of diffusion of identities of the entities through recombinant mediated association of the entities and at least one other entity. The second generation of diffusion of identities facilitates securely constraining a computing system action associated with one of the entities.

Abstract: Synthesizing a control object for a computing event, the control object for securing a computing resource based on a set of access and privilege information provided through a set of mediated associations that are represented by an enchained set of certificates, portions of which are encrypted including entity-specific paths to entity-specific predecessor certificates and partial decryption keys therefor, wherein the control object is applied to secure the computing resource for performing a computing action indicated by a process-type entity identified in the certificate for the control object.

Abstract: Establishing event-specific trust through data-centric mediation by: generating a mediated covenant of association as an instance of trust among a plurality of entities at an association layer of a multi-layer computer security system; constructing a security model enforceable by the multi-layer computer security system that expresses node-node semantic relationships as links among nodes of the model representing protectable computing resources; and producing an event-specific security model via informatic convolution of elements of the covenant with elements of the security model, so that the event-specific security model is operable to constrain a computing action among computing resources represented by the plurality of entities.

Abstract: Diffusing a root identity of an entity among association and event covenants in a multi-dimensional computing security system involves generating a first generation of diffusion of identities of entities participating in mediated association and generating a second generation of diffusion of identities of the entities through recombinant mediated association of the entities and at least one other entity. The second generation of diffusion of identities facilitates securely constraining a computing system action associated with one of the entities.

Abstract: A transposable identity enchainment system for diffuse identity management processing entities for each of users, data, and processes equivalently and having a recombinant access mediation system that mediates association among entities, an associational process management system that creates entity-defining indices, and a multi-dimensional enchainment system that enchains aspects of entity identities via mediated association certificates including at least one root certificate for at least one of the entities.

Abstract: A transposable identity enchainment system processing digital entities of each of users, data and processes equivalently and comprising a recombinant access mediation system, a associational process management system, a topical capability mediation system, and a multi-dimensional enchainment system that enchains aspects of entity identities via mediated association certificates and including at least one root certificate for at least one of the entities.

Abstract: A transposable identity enchainment system processing digital entities of each of users, data and processes equivalently and comprising a recombinant access mediation system, a associational process management system, a topical capability mediation system, and a multi-dimensional enchainment system that enchains aspects of entity identities via mediated association certificates and including at least one root certificate for at least one of the entities.

Abstract: Managing looped, iterative and recursive operations through applying a parameterized instance of an assertion-model apportionment-sub-model pair to a reference data model to produce a parameterized outcome model. Based on a degree of convergence of the parameterized outcome model toward a target parameterized instance of the assertion-model apportionment-sub-model pair, assembling and parameterizing a next assertion-model and a next apportionment-sub-model pair. Repeating these steps until an instance of a parameterized outcome model meets a preconfigured degree of convergence toward a corresponding target parameterized instance of the assertion-model apportionment-sub-model pair.

Abstract: Managing looped, iterative and recursive operations through applying a parameterized instance of an assertion-model apportionment-sub-model pair to a reference data model to produce a parameterized outcome model. Based on a degree of convergence of the parameterized outcome model toward a target parameterized instance of the assertion-model apportionment-sub-model pair, assembling and parameterizing a next assertion-model and a next apportionment-sub-model pair. Repeating these steps until an instance of a parameterized outcome model meets a preconfigured degree of convergence toward a corresponding target parameterized instance of the assertion-model apportionment-sub-model pair.

Abstract: Dereferencing comprises separating content of a source from structure of the source and separating content of the source from a meaning of the content within the structure.

Abstract: Dereferencing comprises separating content of a source from structure of the source and separating content of the source from a meaning of the content within the structure.

Abstract: Semantic mediation is accomplished by initially constructing a model of domain-specific requirements associated with one or more nodes in a hierarchy of semantically linked nodes representing encoded aspects of a domain. Followed by determining a target node in the hierarchy for application of at least one property characterized in a topical profile of a first entity. And further followed by producing a first-entity, target node-specific application model that reflects impacts of properties and characteristics of the topical profile with the model of domain-specific requirements through informatic convolution of the model of domain-specific requirements with the topical profile of the first entity.

Abstract: Semantic mediation is accomplished by initially constructing a model of domain-specific requirements associated with one or more nodes in a hierarchy of semantically linked nodes representing encoded aspects of a domain. Followed by determining a target node in the hierarchy for application of at least one property characterized in a topical profile of a first entity. And further followed by producing a first-entity, target node-specific application model that reflects impacts of properties and characteristics of the topical profile with the model of domain-specific requirements through informatic convolution of the model of domain-specific requirements with the topical profile of the first entity.