Patent ID: 8589673

Claim:
A method comprising: receiving, by an access control management system, from a first client device, information associated with an encrypted data object; receiving, by the access control management system, from a second client device, a request for the information associated with the encrypted data object; verifying, by the access control management system, that a user of the second client device is identified in the received information associated with the encrypted data object; automatically selecting, by the access control management system, an identity provider from a plurality of identity providers, based on a user identifier included in the received information associated with the encrypted data object, the user identifier associated with the user of the second client device; automatically requesting, by the access control management system, from the selected identity provider, authentication of the user of the second client device; and sending, by the access control management system, to the second client device, the received information associated with the encrypted data object, responsive to the authentication by the selected identity provider of the user of the second client device; receiving, by an access control management system, from the first client device, information associated with a second encrypted data object; receiving, by the access control management system, from a third client device, a request for the information associated with the second encrypted data object; verifying, by the access control management system, that a user of the third client device is identified in the received information associated with the second encrypted data object; automatically selecting, by the access control management system, a second identity provider from the plurality of identity providers, based on a second user identifier included in the received information associated with the encrypted data object, the second user identifier associated with the user of the third client device; automatically requesting, by the access control management system, from the selected second identity provider, authentication of the user of the third client device; and sending, to the third client device, the received information associated with the second encrypted data object, responsive to the authentication of the user of the second client device by the second identity provider.