Patent ID: 8813185

Claim:
A method for a first computerized apparatus to control access to resources by a second computerized apparatus, the method comprising: at the first computerized apparatus: receiving a resource request from the second computerized apparatus, the resource request at least comprising a trusted token from the second computerized apparatus and a calling card, the trusted token containing identity data of a user of the first computerized apparatus; determining when the resource request is authorized to access at least the requested resource, wherein the determining comprises; extracting information from the calling card as determined by a rules engine of the first computerized apparatus, and applying one or more conditions of the rules engine on the extracted information; and creating an ad-hoc user account configured to access the requested resource by the second computerized apparatus upon a determination of authorized access, the ad-hoc user account comprising at least the identity data, wherein creating the ad-hoc user account is characterized by automatic creation in response to the resource request.