Abstract: Embodiments provide solutions for establishing a secure communication channel between systems. A controller e.g. an administrator is able to construct a logical network of computing resources and define the relationships between those resources and the hierarchical structures that they are part of. Tags are used to label or identify the resources in accordance with their role or class within their network e.g. “staff laptop”, “guest laptop” etc., and multiple Tags can be assigned to a given resource. Policies (rules) associated with each tag provide a richness of functionality for each type of class as well as enabling constraints regarding use, security and/or user-related permissions to be applied across an entire group of network resources in a simple, efficient and secure manner. The controller can construct, define and control the resources within the connected environment.

Abstract: Embodiments provide methods and systems for establishing a secure communication channel between systems. A system controller e.g. an administrator is able to construct a logical network of computing resources and define the relationships between those resources and the hierarchical structures that they are part of. Tags are used to label or identify the resources in accordance with their role or class within their network e.g. “staff laptop”. “guest laptop” etc., and multiple Tags can be assigned to a given resource. Policies (rules) associated with each tag provide a richness of functionality for each type of class and enable constraints regarding use, security and/or user-related permissions to be applied across an entire group of resources in a simple, efficient and secure manner. The controller can construct, define and control their resources within the connected environment in a way which reflects potentially complex organisational, technical and/or security-based needs.

Abstract: The invention provides a computer-implemented method for validating the respective identities of co-operating entities on a computer network, and comprises generating, transmitting or exchanging a signed digital certificate. The certificate includes a public key associated with an entity on the network; and an arbitrary identifier associated with the public key. The identifier is arbitrary such that the identity of the entity cannot be, or is unlikely to be, discerned from the identifier alone; and/or its generation is random or pseudo-random; and/or selection of the identifier is not related to the identity of the entity or the public key. The certificate is generated and issued by a Certificate Authority in response to a Certificate Signing Request from the entity. In order to validate each other's identities, entities on a network exchange their arbitrary identifiers.

Abstract: The invention provides a computer-implemented method for validating the respective identities of co-operating entities on a computer network, and comprises generating, transmitting or exchanging a signed digital certificate. The certificate includes a public key associated with an entity on the network; and an arbitrary identifier associated with the public key. The identifier is arbitrary such that the identity of the entity cannot be, or is unlikely to be, discerned from the identifier alone; and/or its generation is random or pseudo-random; and/or selection of the identifier is not related to the identity of the entity or the public key. The certificate is generated and issued by a Certificate Authority in response to a Certificate Signing Request from the entity. In order to validate each other's identities, entities on a network exchange their arbitrary identifiers.

Abstract: The invention provides a computer-implemented method for validating the respective identities of co-operating entities on a computer network, and comprises generating, transmitting or exchanging a signed digital certificate. The certificate includes a public key associated with an entity on the network; and an arbitrary identifier associated with the public key. The identifier is arbitrary such that the identity of the entity cannot be, or is unlikely to be, discerned from the identifier alone; and/or its generation is random or pseudo-random; and/or selection of the identifier is not related to the identity of the entity or the public key. The certificate is generated and issued by a Certificate Authority in response to a Certificate Signing Request from the entity. In order to validate each other's identities, entities on a network exchange their arbitrary identifiers.

Abstract: The invention provides a computer-implemented method for validating the respective identities of co-operating entities on a computer network, and comprises generating, transmitting or exchanging a signed digital certificate. The certificate includes a public key associated with an entity on the network; and an arbitrary identifier associated with the public key. The identifier is arbitrary such that the identity of the entity cannot be, or is unlikely to be, discerned from the identifier alone; and/or its generation is random or pseudo-random; and/or selection of the identifier is not related to the identity of the entity or the public key. The certificate is generated and issued by a Certificate Authority in response to a Certificate Signing Request from the entity. In order to validate each other's identities, entities on a network exchange their arbitrary identifiers.