Patent ID: 8341427

Claim:
A system, comprising: at least one cryptographic component distributed at least partially by a cryptographic technology provider, implemented independently from a key generator that generates key information for at least one of publishing data or subscribing to data, the at least one cryptographic component including at least one processor configured to perform at least one searchable encryption algorithm or searchable decryption algorithm based on the key information generated by the key generator, wherein the key information includes capability information that defines access privileges with respect to the data encrypted by the at least one cryptographic component, the capability information is late bound so that up to date access privileges are granted to a given subscriber and data accessible to the given subscriber changes dynamically consistent with changes to the access privileges by a publisher since subscriber capabilities are encoded in the key information; and a network service provider, implemented independently from the key generator and the at least one cryptographic component, including at least one processor configured to implement a network service with respect to data encrypted by the at least one cryptographic component.