Apparatus and method for automating secure email for multiple personas

A machine, comprising:

• a processor;
• a network interface circuit connected to the processor to provide network connectivity to a client device;
• and
• a memory connected to the processor, the memory storing instructions executed by the processor to implement a persona management service that operates to:
• receive a request for a new email account from the client device, wherein the request for the new email account is a request for a persona associated with a real user, wherein the real user has a plurality of personas and wherein each persona has a unique set of identity attributes maintained by the persona management service,
• create a new email account in response to the request,
• receive from the client device cryptographic credentials for the new email account,
• send the cryptographic credentials to a certificate authority,
• receive a certificate authority validation from the certificate authority,
• register the new email account with a cryptographic credential from the certificate authority, and
• convey the cryptographic credential to the client device;
• receive from the client device a request for a recipient cryptographic certificate for an email recipient,
• supply to the client device the recipient cryptographic certificate, and
• send an encrypted and signed email to the email recipient that includes a sender cryptographic certificate.