Abstract: A system and method for adding multi-level security to federated asset repositories is provided. A multi-level security (MLS) manager receives normalized taxonomies from repository managers, which manage repositories that include assets assigned various security levels. In turn, the MLS manager integrates the taxonomies into a composite taxonomy. When a portal receives a request from a user, the portal sends a taxonomy request to the MLS manager that includes the user's user identifier. The MLS manager retrieves the composite taxonomy, identifies the user's security level, filters the composite taxonomy based upon the user's security level, and provides the filtered composite taxonomy to the portal. In turn, the portal generates a user interface view based upon the filtered composite taxonomy and provides the user interface view to the user, which utilizes the user interface view to request and receive access to assets from one or more federated repositories.

Abstract: A system and method for adding multi-level security to federated asset repositories is provided. A multi-level security (MLS) manager receives normalized taxonomies from repository managers, which manage repositories that include assets assigned various security levels. In turn, the MLS manager integrates the taxonomies into a composite taxonomy. When a portal receives a request from a user, the portal sends a taxonomy request to the MLS manager that includes the user's user identifier. The MLS manager retrieves the composite taxonomy, identifies the user's security level, filters the composite taxonomy based upon the user's security level, and provides the filtered composite taxonomy to the portal. In turn, the portal generates a user interface view based upon the filtered composite taxonomy and provides the user interface view to the user, which utilizes the user interface view to request and receive access to assets from one or more federated repositories.

Abstract: The security evaluation method of the invention utilizes multiple levels of security evaluation before certain user's can gain access to system resources. Upon receiving a user access request, the method acquires qualification data regarding the access request and determines a security level that is applicable to a selected system resource which is indicated by the user access request. Thereafter, the method performs at least one of a plurality of security tests to determine if the qualification data matches the security level applicable to the selected system resource. At least some of the plurality of security tests are arranged to be performed in an order of speed of execution, with a fastest executable security evaluation test being performed first and a slowest executable security test being performed last.

Abstract: The invention controls access to data resources by performing the steps of: providing (i) a first directory which relates data objects to object groups, each object group including all data objects having a common assigned security attribute; (ii) a second directory which relates functions to function groups, each function group including functions having a common execution attribute; (iii) a third directory which relates users to user groups, each user group including users having a common user attribute; and a permission directory which lists allowed combinations of (user group, function group, object group). In response to a request from a user to perform a function with respect to an object, the permission directory is examined to determine if the access request is to be allowed or not allowed.

Abstract: A computer system responds to a user query by providing a screen which displays a response that is influenced by prior expressed preferences of the user. The computer system includes a knowledge base of data pertaining to one or more subjects. The system monitors a user's entries and records priority information regarding data preferences of the user. Upon receiving a user's query regarding a selected subject in the knowledge base, the system selects a template for responding to the user's query. The template contains both fixed and variable fields and the system inserts replacement data in the variable fields. The replacement data is selected in accord with recorded priority information relating to the selected subject. The priority information enables a sorting of the replacement data so as to provide data to the user which is inferentially related to the user's prior entry history.

Abstract: A system and method for allowing communication of a large number of parameters from a computer user to an application program with a relatively small amount of interaction. The system uses a plurality of graphical metaphors to represent a collection of known personality or collective knowledge representations to extract a computer user's preferences. A computer user expresses how much likeness exists between themselves and a set of metaphoric graphical objects which is translated into an intermediary format which enables the computer to provide a higher quality of pattern matching and differentiation.

Abstract: A server-based application intercepts an initial request for access to documents which may contain imbedded references to linked information. A request is made from the server to the actual location of the requested document as it is found on a network (e.g. WORLD-WIDE WEB, INTERNET, etc.). The document is retrieved into the server and parsed to discover all imbedded addresses contained therein. The server then replaces each imbedded address with its own address plus the original imbedded address such that all future references to the imbedded information will be supplied by the server. Additional linking information, functions and/or environment escape information may then be prepended and/or postpended to the requested document independently through the server.

Abstract: A tag server system provides unique tag values to many client systems. The tag server system comprises a processor that generates an inventory of unique tag values, such values being generated by monotonically increasing a value within the tag body field. A memory is provided for storing the inventory of unique tag values. A nonvolatile memory is controlled by the processor and stores a highest unique tag value generated by the processor. The processor implements a tag value recovery procedure and is responsive to a data loss failure mode in the tag server system to cause a readout of the highest unique tag value from the non-volatile memory. The processor is responsive to that highest unique tag value to commence generation of new unique tag values monotonically from that value and expends no effort to regenerate lost unique tag values that are less than the highest unique tag value derived from the non-volatile memory.