Abstract: This invention allows granular protection of individual components of a single document, which allows users to access only the information they are authorized to view. The document is available for viewing under the same protection even when the document is accessed offline. The components of the document that are viewable by a specific recipient are based on the roles of that recipient. Thus, role based access control model is used as the security model.

Abstract: A system (101) for implementing redaction rules in compliance with an organization's privacy policy, where the system intercepts messages between an information source (103) and an information destination (102), modifies the message contents based on redaction rules (106) and forwards the redacted contents over to the client. The system also maintains a record of the redacted information and updates the contents of any message submitted by the client (102) in order to maintain database integrity.

Abstract: A system (101) for implementing redaction rules in compliance with an organization's privacy policy, where the system intercepts messages between an information source (103) and an information destination (102), modifies the message contents based on redaction rules (106) and forwards the redacted contents over to the client. The system also maintains a record of the redacted information and updates the contents of any message submitted by the client (102) in order to maintain database integrity.

Abstract: A method of auditing network communications and applying external policy controls enforced by network connectivity including the steps of caching a plurality of packets, tagging each packet with a unique identifier, assembling an array of packets into a readable payload and evaluating the payload contents.

Abstract: A system for authenticating access to a data processing device or database is provided. The system includes a comparison module for comparing an attempt identifier with an account identifier, and a state-determining module for determining a state variable associated with at least one of the attempt identifier and the account identifier. The state-determining module determines the state variable by incrementing the state variable if the attempt identifier does not match the account identifier and if the state variable is less than a predetermined upper bound threshold, decrementing the state variable if the attempt identifier does match the account identifier and if the state variable is greater than a predetermined lower bound threshold, and authenticating the attempt identifier if the attempt identifier does match the account identifier and if the state variable equals the predetermined lower bound threshold.

Abstract: Information retrieval and consumption from the web is becoming the fundamental way we manage our lives, business and leisure. To simplify retrieving information of our interest, a lot of research has been done in the area of web crawlers, or “bots” that navigate the web automatically, read web pages, and index those web pages based on the content of web pages. Another group of utilities that monitor web page changes have also emerged. Web crawlers provide very little control to the users in the manner in which the web is navigated and they fail to work with links that have links embedded in scripts. The web page monitoring applications fail when the pages are dynamically generated, and the links to the pages change all the time. Furthermore more and more content is being protected by authentication schemes such as username and password based authentication. These issues make the conventional web navigation automation tools ineffective for most useful applications.

Abstract: This invention creates a portable digital identity of the individual that includes personal information, and may also include data representing the person's handwritten signature and one or more passwords. The digital identity optionally includes data representing seals, fingerprints and biometric information. The digital identity can be used to bind a verifiable electronic impression with an electronic document using electronic watermarks so that any modification in the document or the electronic impression bound to the document can be detected. The personal information included in the digital identifiers can include, in addition to a password, answers to questions that are composed by the user. The digital identity of a user can be created once and stored after encryption for protection. This digital identity can then be used by the signer to bind a unique instance of an impression of the digital identity to any document.

Abstract: A system monitors a data payload that is being transmitted in a secure form over the Internet and provides rate computations for such payloads based on the size of the data. A data container may be implemented as a digital envelope with the bitmap (digital picture) of a stamp. The current rate for the data container is shown on the stamp and is dynamically updated as data files are added to the envelope. The overall cost is a function of the applied rate card, the size of the data and the type of security services provided.