Abstract: The invention provides a method and apparatus for secure management of data in a computer controlled storage system. The system includes a trusted data management server (tdm server), responsive to a user or user program application, for storing data in and retrieving data from a storage system. The tdm server includes a security structure generator to generate the following security management structures: an unique identifier for the data; access control information for the data; a data signature for authenticating the data from the data and the unique identifier; and an access control information signature for authenticating the access control information from the access control information and the unique identifier.

Abstract: The invention provides a trusted repository for conveying invoices from a provider to a client. The repository includes a vault accessible by an authorized provider, a mechanism for depositing an invoice for a client from said authorized provider into said vault, and a mechanism for accessing a deposited invoice in said repository by said client.