Abstract: A system and method for data protection and secure sharing of information over a computer network. Data objects are subjected to a first level of encryption at their creation based on their content and the credentials or security attributes of the originating user. The first level of encryption has both symmetric and asymmetric aspects. A second level of encryption is employed to establish a secure network for transit of the object over the network to a recipient user or to a common server. The recipient user is granted access to the object only if he possesses the appropriate credentials and security attributes. A configurable policy system implements and manages these principles of access control as a rule based system, and manages and distributes the keys and material necessary to implement the cryptographic functions.