MEDIATOR UTILIZING ELECTRONIC CONTENT TO ENFORCE POLICIES TO A RESOURCE

摘要

Methods, systems and apparatuses for a mediator enforcing policies to a resource utilizing an electronic content, are disclosed. One method includes receiving, by a mediator computing device of a mediator, a second share SKG2 from an owner server, wherein a first share SKG1 is provided to a member server of a member of a group by the owner server, wherein the owner defines policies associated with the group. The method further includes the mediator receiving a request from the member for mediation, including the mediator receiving a dispatch of the header of the encrypted electronic content, determining, by the mediator, whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responds to the request for mediation with a member accessible header.

主权项

1. A method of a mediator enforcing policies to a resource utilizing an electronic content, comprising:
receiving, by a mediator computing device of a mediator, a second share SKG2 from an owner server, wherein a first share SKG1 is provided to a member server of a member of a group by the owner server; wherein the group is created by the owner server generating a group public key PKG and a group secret key SKG, and wherein the owner defines policies associated with the group; wherein the member is added by the owner server to the group by generating the first share SKG1 from the group secret key SKG and a public key of the member, and the second share SKG2 from the group secret key SKG and a public key of the mediator; wherein a user publishes an electronic content for the group, comprising the user encrypting the electronic content to the group public key PKG, wherein the electronic content includes a header and a payload; and wherein the member obtains the encrypted electronic content; further comprising; the mediator receiving a request from the member for mediation, comprising the mediator receiving a dispatch of the header of the encrypted electronic content; determining, by the mediator, whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responding to the request for mediation with a member accessible header, wherein the member accessible header includes the header after application of SKG2; wherein the member obtains a secret based on SKG1 and the member accessible header; and wherein the member decrypts the payload of the electronic content using the secret.