Abstract: Apparatus for controlling cross-organizational access by end users associated with a plurality of organizations to one or more distributed object services available via a resource server across an information technology communications network. The apparatus comprises at least one Requesting Organization (RO) having access to services via the resource server, the Requesting Organization being adapted to issue enrollments to one or more end users upon request and electronically transmitting the enrollments to the respective end users. The apparatus further comprises at least one Servicing Organization (SO) communicating with the Requesting Organization and defining the credentials required for access to a service via the resource server by end users associated with each of the organizations.

Abstract: Messages including encrypted data and having the form of XML documents are exchanged within an information technology network according to Simple Object Access Protocol (SOAP). Each message includes a session key (encrypted to the public key of the party receiving the message) within the XML document containing the encrypted data, meaning that each message is interpretable in a “stand alone” condition, without reference to some shared state (such as the session key for instance) between the parties involved in the messaging. Tags are used to generate modules within the document, and enable easy and convenient separation of elements of the document for distribution by the SOAP gateway protocol handler to the relevant application.

Abstract: Apparatus for controlling cross-organisational access by end users associated with a plurality of organisations to one or more distributed object services available via a resource server across an information technology communications network. The apparatus comprises at least one Requesting Organisation (RO) having access to services via the resource server, the Requesting Organisation being adapted to issue enrolments to one or more end users upon request and electronically transmitting the enrolments to the respective end users. The apparatus further comprises at least one Servicing Organisation (SO) communicating with the Requesting Organisation and defining the credentials required for access to a service via the resource server by end users associated with each of the organisations.

Abstract: Messages including encrypted data and having the form of XML documents are exchanged within an information technology network according to Simple Object Access Protocol (SOAP). Each message includes a session key (encrypted to the public key of the party receiving the message) within the XML document containing the encrypted data, meaning that each message is interpretable in a “stand alone” condition, without reference to some shared state (such as the session key for instance) between the parties involved in the messaging. Tags are used to generate modules within the document, and enable easy and convenient separation of elements of the document for distribution by the SOAP gateway protocol handler to the relevant application.

Abstract: A proxy service for providing a practical point of intervention for the application of information handling policies, especially copyright management and enforcement services. The invention provides a platform upon which to generalize the interpretation and enforcement of copyright policies, which is particularly useful where large related basis of users with heterogeneous viewing environments might need policies applied in a uniform and flexible way. The invention keeps the process and mechanisms of user authentication and authorization separate and distinct from the actual implementation of policy enforcement.

Abstract: The present invention provides a single “container” for storing and/or transporting electronic data, the container including data (externally of the “container”) which is universally readable and/or decipherable and which can be used to specify to the wide range of different applications the format of the encapsulated data, reference the rights management technology used to package the data, and provide policies in order to obtain and interpret the data content.