Patent ID: 8065713
Filing Date: 2011-11-22
Classification: H04L

Abstract:
1. A method for providing access management through use of a plurality of server machines associated with different locations, said method comprising: receiving, at a first server machine of the plurality of server machines, an access request to access a secure item from a first client machine at a first location; authenticating a user of the first client machine; authenticating the first client machine; retrieving at the first server machine, based on the success of said authenticating of the user and authenticating of the first client machine, a user key permitting access to an individually encrypted sub-header of the secured item, the encrypted sub-header including access rules applicable to the user or to a group to which the user belongs for the secured item, the sub-header selected, from a group of individually encrypted sub-headers corresponding to other users or groups and comprising access rules applicable to the other users or groups, based on the sub-header's correspondence to the user or to the group to which the user belongs based on a corresponding user or group identifier; permitting access to the secure item via the first location based on success of said authenticating of the user and authenticating of the first client machine, and further based on allowability by the access rules; and permitting access to the secure item via the first server machine based on said permitting access to the secure system via the first location permitting the user to gain access to the secure item from the first location.