All changes are made within TrustLogic and are implemented immediately across all applications. Rules are defined by the organization with a simple GUI, and can be used generically across the enterprise, or called by a single application. Rules can also ensure compliance with legislation - the same communication addressed to correspondents in different countries may need to be encrypted differently for each recipient in compliance with the legislation of each destination country. Rules can be used to define which CA to trust and for what purposes, when to validate a signature, what method to use, what to do if validation is not possible, what to do if a certificate is revoked or if the CA is not recognized etc. Rules ensure policy is adhered to at all times so that precise relationships between different trust models and CA s for different types of users and situations can be met.
Rules apply the enterprise defined trust policy consistently across all applications.
By using TrustLogic's rules, potential liability can be easily managed. Organizations can decide whether to accept the claimed digital identity of an individual based on commercial decisions of who to trust and to what extent. The certificate and the issuing CA can be given a level of trust and checked to see whether it conforms to legal requirements for the country in which the transaction is given effect. Policy, whether organizational or imposed by a governing body can be programmatically enforced across all jurisdictions. Certificates can be validated at the time of a transaction and the results written to a secure log file.