Patent ID: 7958548

Claim:
A method for provision of access for a data requesting entity to data related to a principal, comprising the following steps: creating, by a processor, an access granting ticket comprising: (a) an access specification specifying a permission for an access to data related to the principal, said data being available at a data providing entity, (b) a principal identifier representing the principal towards the data providing entity, encrypting the access granting ticket, wherein the ticket comprises the access specification and the principal identifier, with an encryption key of the data providing entity, communicating to the data requesting entity the encrypted access granting ticket accompanied by an identifier of the data providing entity, communicating from the data requesting entity to the data providing entity a request comprising the encrypted access granting ticket based on said communicated data providing entity identifier, decrypting the encrypted access granting ticket with a decryption key of the data providing entity corresponding to the encryption key, providing to the data requesting entity access to data related to the principal identifier according to the access specification.