# US 2014/0208108 A1 · Mediator utilizing electronic content to enforce policies to a resource > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 2014/0208108 A1 - Document ID: US20140208108A1 - Status: Published application - Kind: A1 - Application number: 14/226,870 - Filed: 2014-03-27 - Published: 2014-07-24 - Earliest claimed: 2012-02-13 - Assignees: AlephCloud Systems, Inc. - Inventors: James Lewis Lester; Roy Peter D'Souza - Web page: https://patentgrep.com/patent/US20140208108A1 ## CPC - H04L 63/0428: {wherein the data content is protected, e.g. by encrypting or encapsulating the payload} - H04L 9/0825: {using asymmetric-key encryption or public key infrastructure [PKI], e.g. key signature or public key certificates} - H04L 9/0833: {involving conference or group key (network architectures or network communication protocols for key management in group communication in a packet data network H04L63/065)} - H04L 9/14: using a plurality of keys or algorithms - H04L 2209/60: Digital content management, e.g. content distribution - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Methods, systems and apparatuses for a mediator enforcing policies to a resource utilizing an electronic content, are disclosed. One method includes receiving, by a mediator computing device of a mediator, a second share SKG2 from an owner server, wherein a first share SKG1 is provided to a member server of a member of a group by the owner server, wherein the owner defines policies associated with the group. The method further includes the mediator receiving a request from the member for mediation, including the mediator receiving a dispatch of the header of the encrypted electronic content, determining, by the mediator, whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responds to the request for mediation with a member accessible header. ## Claims ### Claim 1 A method of a mediator enforcing policies to a resource utilizing an electronic content, comprising: receiving, by a mediator computing device of a mediator, a second share SKG2 from an owner server, wherein a first share SKG1 is provided to a member server of a member of a group by the owner server; wherein the group is created by the owner server generating a group public key PKG and a group secret key SKG, and wherein the owner defines policies associated with the group; wherein the member is added by the owner server to the group by generating the first share SKG1 from the group secret key SKG and a public key of the member, and the second share SKG2 from the group secret key SKG and a public key of the mediator; wherein a user publishes an electronic content for the group, comprising the user encrypting the electronic content to the group public key PKG, wherein the electronic content includes a header and a payload; and wherein the member obtains the encrypted electronic content; further comprising; the mediator receiving a request from the member for mediation, comprising the mediator receiving a dispatch of the header of the encrypted electronic content; determining, by the mediator, whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responding to the request for mediation with a member accessible header, wherein the member accessible header includes the header after application of SKG2; wherein the member obtains a secret based on SKG1 and the member accessible header; and wherein the member decrypts the payload of the electronic content using the secret. ### Claim 2 (depends on 1) The method of claim 1, wherein the electronic content provides access to the resource. ### Claim 3 (depends on 1) The method of claim 1, wherein the electronic content provides access to use of a physical resource. ### Claim 4 (depends on 1) The method of claim 1, wherein the resource includes at least one financial instrument, and the electronic content provides access to the financial instrument. ### Claim 5 (depends on 1) The method of claim 1, wherein the policies associated with the group control access to the resource. ### Claim 6 (depends on 1) The method of claim 1, wherein the policies associated with the group control access to the group. ### Claim 7 (depends on 6) The method of claim 6, wherein the policies associated with the group control access to add resources to the group. ### Claim 8 (depends on 1) The method of claim 1, wherein the policies associated with the group control access to administer the group. ### Claim 9 (depends on 1) The method of claim 1, wherein the electronic content is stored at a custodian. ### Claim 10 (depends on 1) The method of claim 1, wherein the mediator determines which policy applies to the resource through the header. ### Claim 11 (depends on 1) The method of claim 1, wherein the mediator determines which policy applies to the resource by accessing policy information. ### Claim 12 (depends on 1) The method of claim 1, wherein the mediator determines which policy applies to the resource through the header, and by accessing policy information. ### Claim 13 (depends on 1) The method of claim 1, wherein the determining, by the mediator, whether the member is eligible to access the resource is additionally based at least in part on member state information. ### Claim 14 (depends on 13) The method of claim 13, wherein the member state information includes assigned location information. ### Claim 15 (depends on 14) The method of claim 14, wherein the assigned location information is received from a radio receiver of the user. ### Claim 16 (depends on 13) The method of claim 13, wherein the member state information includes attestations of eligibility to access properties of the resource. ### Claim 17 (depends on 13) The method of claim 13, wherein the member determines whether the member has access to the resource or properties of the resource based on the member state information. ### Claim 18 (depends on 17) The method of claim 17, wherein the member server runs a trusted agent, and wherein the trusted agent verifies that the member has access to the resource or properties of the resource based on the member state information. ### Claim 19 (depends on 1) The method of claim 1, wherein resource policies are set or applied by any user. ### Claim 20 (depends on 19) The method of claim 19, wherein the determining, by the mediator, whether the member is eligible to access the resource is additionally based at least in part on the resource policies. ### Claim 21 (depends on 1) The method of claim 1, wherein user policies are set or applied by any user. ### Claim 22 (depends on 21) The method of claim 21, wherein the determining, by the mediator, whether the member is eligible to access the resource is additionally based at least in part on the user policies. ### Claim 23 A mediator server operative to enforcing policies to a resource using an electronic content, comprising a mediator of the mediator server operative to: receive a second shares SKG2 from an owner server, wherein a first share SKG1 is provided to a member server of a member by the owner server; wherein a group is created by the owner server comprising generating a group public key PKG and a group secret key SKG; wherein the member is added by the owner server to the group by generating the first share SKG1 from the group secret key SKG and a public key of the member, and the second share SKG2 from the group secret key SKG and a public key of the mediator; wherein a user publishes an electronic content for the group, comprising the user encrypting the electronic content to the group public key PKG, wherein the electronic content includes a header and a payload; and wherein the member obtains the encrypted electronic content; the mediator of the mediator server further operative to: receive a request from the member for mediation, comprising the mediator receiving a dispatch of the header of the encrypted electronic content; receive a request, by the member, for mediation, comprising the mediator receiving a dispatch of the header of the encrypted electronic content from the member; determine whether the member is eligible to access the electronic content based at least in part on the policies associated with the group, if eligible, the mediator responding to the request for mediation with a member accessible header, wherein the member accessible header includes the header after application of SKG2; wherein the member obtains a secret based on SKG1 and the member accessible header; and wherein the member decrypts the payload of the electronic content using the secret. ### Claim 24 (depends on 23) The mediator server of claim 23, wherein the electronic content provides access to the resource. ### Claim 25 (depends on 23) The mediator server of claim 23, wherein the electronic content provides access to use of a physical resource. ### Claim 26 (depends on 23) The mediator server of claim 23, wherein the resource includes at least one financial instrument, and the electronic content provides access to the financial instrument. ### Claim 27 (depends on 23) The mediator server of claim 23, wherein the policies associated with the group control access to the resource. ### Claim 28 (depends on 23) The mediator server of claim 23, wherein the determining, by the mediator, whether the member is eligible to access the resource is additionally based at least in part on member state information. ### Claim 29 (depends on 23) The mediator server of claim 23, wherein resource policies are set or applied by any user. ### Claim 30 (depends on 23) The mediator server of claim 23, wherein user policies are set or applied by any user.