摘要 |
<p>Attested identities are provided. An applicant requests (110,210) an attested identity. Attesting resources provide (140,240) assertions that include roles, rights, and privileges for the attested identity. An attested identity is a collection of attributes, roles (401), rights (402), privileges (403), and assertions (404); the validity of which is attested to by attesting resources according to stated policy. The activation of an attested identity involves the application of policy and testing (230) of assertions, such that access to a resource is allowed, denied, partially allowed, or restricted (235) in some manner.</p> |