Patent ID: 8024561

Claim:
A computer-implemented method, comprising: receiving a digitally signed document and a corresponding digital signature created by a first application of a remote computer system, the first application including one or more functions activated based on a particular digital certificate, wherein the digitally signed document includes: the particular digital certificate, and an indication of one or more allowed operations permitted to be performed on the digitally signed document; determining whether the digital signature is valid based on the particular digital certificate; if it is determined that the digital signature is valid, enabling said one or more allowed operations to be performed on the digitally signed document in a second application; if it is determined that the digital signature is not valid, preventing said one or more allowed operations from being performed on the digitally signed document in the second application; and subsequent to said enabling or said preventing, and responsive to a credential issuer disabling said first application by revoking said particular digital certificate, disabling access to the digitally signed document in the second application.