Patent ID: 8683602

Claim:
A method of secure transport of data, the method comprising: sharing of key information between a content provider and a key distributor, wherein the key information is for enabling decryption of first and second encrypted data, the key distributor being configured to make one or more decryption keys available to an authorised user; creating, at the content provider, a container object, the container object comprising: first encrypted data having a first encryption based on at least a part of said key information; second encrypted data having a second encryption based on at least a part of said key information, wherein the second encryption is different from the first encryption; and metadata relating to the first encrypted data and the second encrypted data; authorisation policy information and/or at least one security attribute comprising one or more rules relating to decryption rights of users to decrypt said encrypted data, wherein at least one of said first encrypted data and said second encrypted data uses a type of encryption that is dependent on said authorisation policy information or security attribute; and sending the container object to a data store or otherwise making the container object available, to allow user access to the container object and the authorisation policy information and/or security attribute contained therein, wherein the key information shared between the content provider and the key distributor is in a form that can be converted by the key distributor to a valid decryption key by processing the authorisation policy information and/or security attribute, such that the key distributor can generate a valid decryption key upon receipt of the authorisation policy information and/or security attribute from the user.