Abstract: The present invention relates a method, computer system and a computer readable medium for creating a collaborative workflow process in a shared network space wherein the shared space is created by interaction of executable codes in a host and a user application and the shared space is described by a session attribute list; loading a media application with a plurality of tools into one or more user computers; inputting multi type content into the shared space; and displaying the content by computers in one of a synchronous or asynchronous mode; selecting a procedural framework template for the creation of a workflow process; and adding a content process section, a discussion point section, an approval section, a hand-off section; and storing state of the procedural framework.

Abstract: The present invention relates a method and system for collaborating in a shared network space comprising logging in from the one or more user machines to the shared space in a network from a user application to a host, wherein the shared space is created by interaction of executable codes in the host and the user application and the shared space is described by a session attribute list; loading a media application with tools into a one or more user machines; inputting graphical content; and displaying the content by other user machines in the shared space synchronously or asynchronously including anchoring a sidebar panel to a region of a browser; creating one or more user messages in the sidebar panel; displaying graphical content on a whiteboard; highlighting points of interest within the graphical content; and associating said user messages to the points of interest by one or more lines.

Abstract: The present invention relates a method and system for creating a collaborative book in a shared network space including the steps of: logging in from one or more user computers to a shared space in the network from a user application to a host, wherein the shared space is created by interaction of executable codes in a host and a user application and the shared space is described by a session attribute list; loading a media application with a plurality of tools into one or more user computers; inputting multi type content into the shared space; and displaying the content by computers in one of a synchronous or asynchronous mode; providing templates to automatically create pages with specific layouts, for each type content for searching resource information including collaboration and providing automatic page updates using searched resource information; and tracing user changes and searched resource information.

Abstract: The present invention relates a method and system for collaborating in a shared network space comprising logging in from the one or more user machines to the shared space in a network from a user application to a host, wherein the shared space is created by interaction of executable codes in the host and the user application and the shared space is described by a session attribute list; loading a media application with tools into a one or more user machines; inputting graphical content; and displaying the content by other user machines in the shared space synchronously or asynchronously including anchoring a sidebar panel to a region of a browser; creating one or more user messages in the sidebar panel; displaying graphical content on a whiteboard; highlighting points of interest within the graphical content; and associating said user messages to the points of interest by one or more lines.

Abstract: The present invention relates to a method and system for creating a collaborative file in a shared network including: accessing one or more user machines in a shared space, wherein the shared space is created by interaction of executable codes in a host and a user application and the shared space is described by a session attribute list; loading a media application with tools into one or more user machines; using a stage manager tool from the media application to stage and correlating media-layer events according to spatial, temporal and relational coordinate data in the user application, wherein the content composed of the media-layer events are described by at least a user, media-layer events, time and command; recording content associated with one or more of layers according to a user, media-layer events, time and command; and accessing said content based upon a user, media-layer events, time and command.

Abstract: The present invention relates to a system and method to allow multiple users to collaborate on tasks and interact in a shared space session within a network in real-time; using a media application to manage media-layers. Each media-layer serves as a container for multimedia programs or plug-ins. The invention allows which media-layer to display via organization metaphors and filtering criteria. When multiple users are logged into the same shared space, each user can invoke and observe modifications to media-layers with the browser based or client based application. All events are synchronized among all users in that shared space, where the system is a communication conduit. The media-layers in the shared space maintains spatial and temporal correlation by a media application stage manager tool and described as a collection file descriptor such as an XML file. The ability to invoke events that affect media-layers can be supported in a synched or non synched mode on demand.

Abstract: A token device that generates and displays one-time passwords and couples to a computer for inputting or receiving data for generating and outputting one-time passwords and performing other functions is provided. The token includes an interface for coupling to a computer. The token may also be coupled to any network that the computer may be connected to, when coupled to the computer. Data and information may be transmitted between the computer and token, and between the network and token, via the computer and interface. The data and information may include one-time password seeding, file transfer, authentication, configuration and programming of the token. The token must be seeded to generate and display one-time passwords. An original, or seed, value is loaded into the token. One-time passwords are subsequently generated or calculated, or both, from the seed value. Seeding of the token involving a counter, time, or time-related functions, may allow synchronization of the token with such functions.

Abstract: A token device that generates and displays one-time passwords and couples to a computer for inputting or receiving data for generating and outputting one-time passwords and performing other functions is provided. The token includes an interface for coupling to a computer. The token may also be coupled to any network that the computer may be connected to, when coupled to the computer. Data and information may be transmitted between the computer and token, and between the network and token, via the computer and interface. The data and information may include one-time password seeding, file transfer, authentication, configuration and programming of the token. The token must be seeded to generate and display one-time passwords. An original, or seed, value is loaded into the token. One-time passwords are subsequently generated or calculated, or both, from the seed value. Seeding of the token involving a counter, time, or time-related functions, may allow synchronization of the token with such functions.

Abstract: A system and method for controlling access to multiple public networks and for controlling access to multiple private networks is provided. Authentication is used with unique public shared secrets and unique private shared secrets to control access to the networks. The invention includes a user device for communicating with at least a public network and/or a private network. The device may be capable of accessing multiple networks through one or more private networks with multiple access control servers. The user device must provide a correct response to each access control server, before access to the network may be granted. The device generates a one-time password, or response, to gain access to a controlled network server. The response generated by the device is matched to a response generated by an access control server that may have generated a challenge that prompted the response. If the two responses match, the device is authenticated and a user of the device is granted access to the network server.

Abstract: A method and apparatus for dynamically generating data encryption keys for encrypting data files and for decrypting encrypted data files via a key exchange method is provided. A dynamically generated an encryption key is generated for each encryption event, so that the key cannot be produced or reproduced. A key exchange component of the invention ensures that only an intended recipient has the means to decrypt a file encrypted with the dynamically generated symmetric encryption keys.

Abstract: The present invention relates to a method and system for creating a collaborative file in a shared network including: accessing one or more user machines in a shared space, wherein the shared space is created by interaction of executable codes in a host and a user application and the shared space is described by a session attribute list; loading a media application with tools into one or more user machines; using a stage manager tool from the media application to stage and correlating media-layer events according to spatial, temporal and relational coordinate data in the user application, wherein the content composed of the media-layer events are described by at least a user, media-layer events, time and command; recording content associated with one or more of layers according to a user, media-layer events, time and command; and accessing said content based upon a user, media-layer events, time and command.

Abstract: A method and apparatus for dynamically generating data encryption keys for encrypting data files and for decrypting encrypted data files via a key exchange method is provided. A dynamically generated an encryption key is generated for each encryption event, so that the key cannot be produced or reproduced. A key exchange component of the invention ensures that only an intended recipient has the means to decrypt a file encrypted with the dynamically generated symmetric encryption keys.

Abstract: A token device that generates and displays one-time passwords and couples to a computer for inputting or receiving data for generating and outputting one-time passwords and performing other functions is provided. The token includes an interface for coupling to a computer. The token may also be coupled to any network that the computer may be connected to, when coupled to the computer. Data and information may be transmitted between the computer and token, and between the network and token, via the computer and interface. The data and information may include one-time password seeding, file transfer, authentication, configuration and programming of the token. The token must be seeded to generate and display one-time passwords. An original, or seed, value is loaded into the token. One-time passwords are subsequently generated or calculated, or both, from the seed value. Seeding of the token involving a counter, time, or time-related functions, may allow synchronization of the token with such functions.

Abstract: A token device that generates and displays one-time passwords and couples to a computer for inputting or receiving data for generating and outputting one-time passwords and performing other functions is provided. The token includes an interface for coupling to a computer. The token may also be coupled to any network that the computer may be connected to, when coupled to the computer. Data and information may be transmitted between the computer and token, and between the network and token, via the computer and interface. The data and information may include one-time password seeding, file transfer, authentication, configuration and programming of the token. The token must be seeded to generate and display one-time passwords. An original, or seed, value is loaded into the token. One-time passwords are subsequently generated or calculated, or both, from the seed value. Seeding of the token involving a counter, time, or time-related functions, may allow synchronization of the token with such functions.

Abstract: A system and method for controlling access to multiple public networks and for controlling access to multiple private networks is provided. Authentication is used with unique public shared secrets and unique private shared secrets to control access to the networks. The invention includes a user device for communicating with at least a public network and/or a private network. The device may be capable of accessing multiple networks through one or more private networks with multiple access control servers. The user device must provide a correct response to each access control server, before access to the network may be granted. The device generates a one-time password, or response, to gain access to a controlled network server. The response generated by the device is matched to a response generated by an access control server that may have generated a challenge that prompted the response. If the two responses match, the device is authenticated and a user of the device is granted access to the network server.

Abstract: A system and method for controlling access to multiple public networks and for controlling access to multiple private networks is provided. Authentication is used with unique public shared secrets and unique private shared secrets to control access to the networks. The invention includes a user device for communicating with at least a public network and/or a private network. The device may be capable of accessing multiple networks through one or more private networks with multiple access control servers. The user device must provide a correct response to each access control server, before access to the network may be granted. The device generates a one-time password, or response, to gain access to a controlled network server. The response generated by the device is matched to a response generated by an access control server that may have generated a challenge that prompted the response. If the two responses match, the device is authenticated and a user of the device is granted access to the network server.

Abstract: A system and method for strong access control to a network is provided. An access control server and authentication device are provided for controlling access to a network. The access controlled by the access control server may include network protocols, network resources, and electronic devices that may be coupled to the network. Network resources may include data stored on the network. The access control server may grant access to the network to a user based upon a correct response received from an authentication device assigned to the user. The user may be able to access only selected data that may be determined by an access level assigned to the authentication device. Upon authentication, the authentication device must remain active to maintain a network session. The authentication device becomes inactive when it is deactivated, uncoupled from the network, or in any mode in which the device cannot produce a response to the access control server.

Abstract: A system and method for preventing interception and decryption of information by an unauthorized party when that information is transmitted over a network is provided. A token is used to encrypt one-time password that is different for each network session, to prevent decryption thereof. The encrypted one-time password is returned to a network server for authentication by the server. The network server generates its response in a similar fashion. The server compares its response to the one-time password, to determine if they match. If they match, then the client is granted access to the network. If they responses do not match, then the client is denied access to the network by the server.

Abstract: The present invention relates to a system and method to allow multiple users to collaborate on tasks and interact in a shared space session within a network in real-time; using a media application to manage media-layers. Each media-layer serves as a container for multimedia programs or plug-ins. The invention allows which media-layer to display via organization metaphors and filtering criteria. When multiple users are logged into the same shared space, each user can invoke and observe modifications to media-layers with the browser based or client based application. All events are synchronized among all users in that shared space, where the system is a communication conduit. The media-layers in the shared space maintains spatial and temporal correlation by a media application stage manager tool and described as a collection file descriptor such as an XML file. The ability to invoke events that affect media-layers can be supported in a synched or non synched mode on demand.