METHOD AND APPARATUS FOR PRESENTING ANONYMOUS GROUP NAMES

摘要

A method and system for granting an applicant associated with a client computer (10) in a client-server system access to a requested service without providing the applicant with intelligible information regarding group membership. The applicant transmits a request for service to an application server (12) over a computer network (14). In response, the server determines which group or groups are authorized to obtain access to the service. The application server then prepares an encrypted message which includes the identification of the group or groups having access privileges and transmits the encrypted message to the client along with a request that the client prove membership in at least one of the groups. The client forwards the encrypted message to the group membership server (16a) which decrypts the message and prepares a certificate or other proof of membership.