초록 ▼

An electronic communication authority server that provides centralized key management, implementation of role-based enterprise policies and workflow and projection of corporate authorities over trusted networks. The authority server includes a key database that associates keys, signatures and indica

An electronic communication authority server that provides centralized key management, implementation of role-based enterprise policies and workflow and projection of corporate authorities over trusted networks. The authority server includes a key database that associates keys, signatures and indicators of corporate authority (such as letterhead) with particular corporate roles. There can be multiple roles or a single role (e.g., employee) for each authority server. Users associated with one or more roles are permitted by the authority server to exercise authority or include the indicators of authority in their communications. The authority server also encrypts/decrypts and signs/verifies communications from/to a user using the keys and signatures associated with the role being exercised by the user for that communication. The authority server permits roles to be delegated or transferred, which facilitates the execution by the authority server of role-dependent workflow procedures. In another embodiment, keys are not associated with individual roles but with servers and/or groups of users. In this embodiment a server processes a request from one of its users in accordance with the role-based policies it embodies and then, if necessary, indicates the identity of the requesting user in the end product of the request, which it then signs using its own key and encrypts with appropriate destination keys.

대표청구항 ▼

[ What is claimed is:] [1.] An authority server providing authority services for one or more users of one or more clients coupled to the authority server via secure connections, the one or more users being associated with a collective entity having a set of policies for the exercise of its authority

[ What is claimed is:] [1.] An authority server providing authority services for one or more users of one or more clients coupled to the authority server via secure connections, the one or more users being associated with a collective entity having a set of policies for the exercise of its authority, the authority services including allowing the users to indirectly exercise the authority of the collective entity through the authority server, the authority server comprising:a processing unit;a memory in which applications can be executed by the processing unit;a policy application configured to execute in the server with features that can only be directed by respective classes of users according to the set of policies; andan authority application embodying the authority of the collective entity that is configured to respond to a request by a particular user of a particular class to direct a particular feature of the policy application by:determining according to the set of policies and the particular class whether the particular user is allowed to direct the particular feature; andwhen the particular user is allowed to direct the particular feature, executing the particular feature using any user information provided by the particular user in the request and forming a manifestation of the execution incorporating the user information when provided.