A computer-implemented method for managing security associated with document collaboration, comprising: maintaining a list of collaborators, including an identity for each collaborator, associating the collaborators on the list with different encrypted versions of a symmetric key, wherein each collaborator's version of the symmetric key is encrypted with the public key for that particular collaborator, wherein decrypted versions of the symmetric key permit access to a document, and wherein the list of collaborator identities and their associated encrypted versions of the symmetric key is embedded within or linked or indexed to the document, using an identity service as one of the collaborators, to interact with documents, collaborators and lists of collaborators to manage document access and security, characterized in that the identity service is added as one of the collaborators for the document and is identified in the list of collaborators for the document, and performs the steps of; identifying a collaborator associated with a document, when the collaborator lacks an encrypted version of a symmetric key needed to access the documents or lacks a proper key needed to decrypt that symmetric key; verifying that a community list associated with the document, and the collaborator, permits the collaborator to enter into a dynamic trusted relationship between the collaborator and the document, and in response to the verifying; acquiring a dynamic public key from or on behalf of the collaborator; decrypting the encrypted version of the symmetric key which grants access to the document by the identity service using its own private key-public key pair; and wherein once the identity service has the decrypted symmetric key, it re-encrypts the symmetric key with the collaborator's newly provided dynamic public key; wherein the identity service notifies the collaborator that it is free to acquire the needed symmetric key from the document, and the collaborator accesses the document, acquires the encrypted version of the symmetric key, uses its new dynamic public key to decrypt the encrypted version of the symmetric key, and uses the symmetric key to access the content or services of the document, and wherein if a new collaborator is being added to or removed from the list of collaborators that can access the document, the identity service further: generates a modified version of the symmetric key, and updates the encrypted versions of the modified symmetric key for each of the collaborators in the list of collaborators. maintaining a list of collaborators, including an identity for each collaborator, associating the collaborators on the list with different encrypted versions of a symmetric key, wherein each collaborator's version of the symmetric key is encrypted with the public key for that particular collaborator, wherein decrypted versions of the symmetric key permit access to a document, and wherein the list of collaborator identities and their associated encrypted versions of the symmetric key is embedded within or linked or indexed to the document, using an identity service as one of the collaborators, to interact with documents, collaborators and lists of collaborators to manage document access and security, characterized in that the identity service is added as one of the collaborators for the document and is identified in the list of collaborators for the document, and performs the steps of; identifying a collaborator associated with a document, when the collaborator lacks an encrypted version of a symmetric key needed to access the documents or lacks a proper key needed to decrypt that symmetric key; verifying that a community list associated with the document, and the collaborator, permits the collaborator to enter into a dynamic trusted relationship between the collaborator and the document, and in response to the verifying; acquiring a dynamic public key from or on behalf of the collaborator; decrypting the encrypted version of the symmetric key which grants access to the document by the identity service using its own private key-public key pair; and wherein once the identity service has the decrypted symmetric key, it re-encrypts the symmetric key with the collaborator's newly provided dynamic public key; wherein the identity service notifies the collaborator that it is free to acquire the needed symmetric key from the document, and the collaborator accesses the document, acquires the encrypted version of the symmetric key, uses its new dynamic public key to decrypt the encrypted version of the symmetric key, and uses the symmetric key to access the content or services of the document, and wherein if a new collaborator is being added to or removed from the list of collaborators that can access the document, the identity service further: generates a modified version of the symmetric key, and updates the encrypted versions of the modified symmetric key for each of the collaborators in the list of collaborators. generates a modified version of the symmetric key, and updates the encrypted versions of the modified symmetric key for each of the collaborators in the list of collaborators.