Patent ID: 7571314

Claim:
A method, comprising: storing, by a client, at least one first certificate from an authorizer; storing, by the client, a universal resource identifier (URI) associated with both the at least one first certificate and a third party; providing, by the client to the third party, at least one second certificate and the universal resource identifier (URI); determining by the client if the third party's delegated ability to use the at least one first certificate is authorized; and if the third party's delegated ability to use the at least one first certificate is determined to be authorized: providing, by the client directly to the authorizer, the at least one first certificate, in response to the authorizer accessing the universal resource identifier (URI), wherein the first certificate is provided to the authorizer without interaction between the client and the third party with regard to the first certificate; wherein the client retains control over the third party's use of the at least one first certificate; otherwise if the third party's delegated ability to use the at least one first certificate is determined to be not authorized: not providing, by the client to the authorizer, the at least one first certificate; wherein the third party's delegated ability is permissible upon the authorizer receiving the second certificate from the third party and the first certificate from the client.