Abstract: Systems and methods for monitoring the state of a token and communication exchanges between the token containing an embedded integrated circuit chip and a system are provided. Communications between the token and the system are established and the exchanged of commands and responses between the token and the system are monitored and evaluated for compliance with an identified policy. The identified policy contains lists of impermissible commands, responses and content, and delivery of the commands and responses is contingent upon compliance with the identified policy. The token is in communication with a token reader which communicates with the system using token reader driver software. Either the token reader driver software or the token itself is adapted to provide for the desired monitoring, evaluation and policy enforcement. Systems and methods are also provided that enforce policies at access points within a physical access system. The physical access system can be used in combination with tokens.

Abstract: The present invention is directed a validation service, for example a digital certificate validation service (CVS), that facilitates the application of user-defined policies to structured electronic messages, for example E-mails, and the implementation of corresponding business rules based on user, system, device or electronic message attributes. The present invention provides an easily scalable, extensible and reliable solution to enforcing policies in electronic communications. The service includes a method for policy enforcement in electronic messages that includes identifying one or more policies to be applied to an electronic message send from a first end entity to a second end entity and identifying at least one business rule to be applied to the electronic message. The electronic message is evaluated for compliance with the identified policy or policies, and the electronic message is routed in accordance with the policy evaluation and the identified business rules.