Abstract: A method of constructing a machine-readable document comprises applying a document construction process to first and second input machine-readable documents comprising a template document and a variable data document to produce an output document binding the variable data to the template. Each input document is declared to be of a respective type having a type identifier and the machine-readable document construction process is performed if the declared types meet a type match criterion.

Abstract: A method of constructing a remotely editable machine-readable template document comprises generating a presentation image of the machine-readable template document, generating a data structure identifying editable portions of the presentation image of the template document and sending the presentation image and data structure to a remote editing location.

Abstract: A method of controlling construction, at a remote source, of a machine-readable document is described. The method comprises the steps of presenting a view of a machine-readable document template stored at the remote source and having static and dynamic portions, the dynamic portions being processable in conjunction with a variable data machine-readable document to construct an output machine-readable document. The method further comprises the steps of presenting a view of a variable data machine-readable document stored at the remote source, adding at least one data field to the variable data document, populating the further data field with data and sending an instruction to the remote source to modify the machine-readable document template to include a dynamic portion corresponding to the further data field.

Abstract: A method is described of constructing a machine-readable document. The method comprises applying a machine-readable document construction process to input documents comprising a first, template machine-readable document and a second, variable data containing machine-readable document to produce an output machine-readable document binding the variable data to the template, storing the content of said output machine-readable document at a storage location and assigning an identifier to the output machine-readable document identifying storage location.

Abstract: To provide for cryptographic separation, embodiments of the invention employ containment mechanisms provided by trusted operating systems to ensure that plaintext data which must be encrypted in accordance with a security policy (or, in reverse, ciphertext data which is to be decrypted) is processed by a suitable encryption routine before being sent onwards for transmission, storage, or the like. Such containment mechanisms usually include mandatory system access control rules which specify to which system resources the output of a system resource (such as an application) may be supplied. By specifying a suitable set of such rules, mandatory encryption can be enforced at the operating system kernel level.