Method for controlling access to electronically provided services and system for implementing such method

摘要

The security of stored data and applications is improved by and access control system and method in which user keys for accessing the stored data/services which keys are provided to users are representative of the user's level of authority, such that there is no need to maintain a separate lookup table of user authority levels. This removes a potential security exposure from the system.The user keys are advantageously hierarchical, including data for generating a plurality of different access keys for each of a plurality of different access levels. The access keys may be decryption keys for encrypted data or application programs. The invention is applicable to SmartCard systems.