A distributed revocation method for a distributed network comprising a plurality of autonomous device nodes, said method comprising: distributing partial revocation information to each of the autonomous device nodes of the distributed network; conducting a vote amongst at least three autonomous device nodes of a distributed network regarding whether a suspect autonomous device node of the distributed network should be removed from the distributed network, wherein to vote for a revocation of the suspect autonomous device node an autonomous device node discloses its partial revocation information against the suspect autonomous device node to other device nodes; and responsive to said vote satisfying a revocation criterion, ceasing communication between the suspect autonomous device node and the other autonomous device nodes of the distributed network by (i) an autonomous device node constructing a revocation message by combining the disclosed partial revocation information for revoking the suspect autonomous device node, wherein the revocation message instructs an autonomous device which receives the revocation message to cease communication with the suspect autonomous device node, and (ii) intercommunicating the revocation message amongst the autonomous device nodes of the distributed network, characterized by that the revocation criterion is based on a trust factor indicative of weighted trustworthiness of the suspect autonomous device node in the distributed network. distributing partial revocation information to each of the autonomous device nodes of the distributed network; conducting a vote amongst at least three autonomous device nodes of a distributed network regarding whether a suspect autonomous device node of the distributed network should be removed from the distributed network, wherein to vote for a revocation of the suspect autonomous device node an autonomous device node discloses its partial revocation information against the suspect autonomous device node to other device nodes; and responsive to said vote satisfying a revocation criterion, ceasing communication between the suspect autonomous device node and the other autonomous device nodes of the distributed network by (i) an autonomous device node constructing a revocation message by combining the disclosed partial revocation information for revoking the suspect autonomous device node, wherein the revocation message instructs an autonomous device which receives the revocation message to cease communication with the suspect autonomous device node, and (ii) intercommunicating the revocation message amongst the autonomous device nodes of the distributed network, (i) an autonomous device node constructing a revocation message by combining the disclosed partial revocation information for revoking the suspect autonomous device node, wherein the revocation message instructs an autonomous device which receives the revocation message to cease communication with the suspect autonomous device node, and (ii) intercommunicating the revocation message amongst the autonomous device nodes of the distributed network, characterized by that the revocation criterion is based on a trust factor indicative of weighted trustworthiness of the suspect autonomous device node in the distributed network.