Patent ID: 8640189

Claim:
A method comprising: receiving, at a first service node, from a validation system, a request to apply a first policy service to a message received from a first entity, the validation system residing on a first network, the validation system configured to determine whether the message may be transmitted to a second entity on a second network by validating a plurality of tokens associated with the message, the plurality of tokens being generated based on requests by the validation system and corresponding to the message received from the first entity, the plurality of tokens comprising tokens generated by the first service node applying the first policy service to the message and a second service node applying a second policy service to the message, none of the plurality of tokens being generated based on application of a policy service to the second entity; receiving, at the first service node, at least one result from a policy service engine of applying the first policy service to the message; determining, at the first service node, at least one predefined assertion based on the received at least one result; generating a first token by encrypting the at least one predefined assertion using a first parameter associated with the first service node and not the second service node; and sending the message and the first token to the validation system.