Abstract: An administrative user is authenticated to a server and authorized to delegate permission to a user to access an application. A request from the administrative user to delegate permission to the user is received at the server. A request from the user to register with the server is received at the server. The user is provided access to the application. The administrative user authenticates the user with non-secret information. The communications take place over a computer network.

Abstract: A method and system for manipulating permissions are disclosed. A first permission, including a label related to a service accessible via a service web server, is maintained at a permission web server. A second user is provided access to the first permission upon his authenticating to the permission web server and is provided a permission to access the service. The second user will be given access to the service, upon his requesting access to the service and supplying the permission, if the digital signatures in the permission are positively verified. The second user may, instead of seeking access to the service himself, delegate permission to do so to a subsequent user.

Abstract: A method and system expedite delegation of at least one permission over a personal area network. Pregenerated values representing at least a portion of data required to create a digital signature are created on a computer. The values are transferred to a delegation device. The values are used in creating a digital signature on the delegation device. A delegator delegates to a delegates the permission over the personal area network while physical presence exists between the delegator and the delegatee. The permission is represented using a digital signature and comprise authority to access services.

Abstract: A method and system manage access to services. Permission relating to the services is delegated over an ad hoc network in a personal area network. The permission is represented using a digital signature. Data representing credential information is received from a permitted delegatee via a credential transmission mechanism, such as a URL, a cookie within an http request, or a header of an http request for a web page, over a second computer network. Access to the services is provided over the second computer network.