System and method for developing and using trusted policy based on a social model

• US 20060248573A1
• Filed: 04/28/2005
• Published: 11/02/2006
• Est. Priority Date: 04/28/2005
• Status: Abandoned Application

• Current Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Original Assignee: ContentGuard Holdings, Inc. (Pendrell Corporation)
• Inventors: Pannu, Tejinder Pal, Raley, Michael, Chen, Eddie J., Gilliam, Charles P.
• Application Number:
  US11/116,432
• Publication Number:
  US 20060248573A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A trust policy is constructed based upon a social relationship between real-world entities. The trust policy may determined based upon a social network and social network maps. The social network map provides a framework to determine social distances. The trust policy provides quick and secure access to desired or trusted nodes while providing security from entities outside the trusted sphere of nodes. The trust policy determined by the social distance may be used for various types of applications including filtering unwanted e-mail, providing secure access to resources, and accessing protected services. File sharing, referral querying, advertisement targeting, announcement targeting, access control, and various applications may be limited using the constructed trust policy.

Claims

1. A method of using a social relationship between associated entities to enforce a trust policy for a computing application, the method comprising:

instantiating a relationship between associated entities using a computer;

determining a trust relationship between associated entities based on the relationships instantiated with the computer;

creating a trust policy based on a trust relationship;

storing the trust policy on a memory device; and

enforcing the trust policy for a computing application.

2. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the computer instantiates a plurality of relationships.

3. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein instantiating a relationship comprises deriving the relationship from an existing computing application.

4. The method of using a social relationship between associated entities to enforce a trust policy of claim 3, wherein the existing computing application comprises one of Friendster®

, Linkedin™

, or Tribe®

.

5. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the trust relationship is determined based on social distance.

6. The method of using a social relationship between associated entities to enforce a trust policy of claim 5, wherein the social distance is a numerical value assigned by a first associated entity to a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

7. The method of using a social relationship between associated entities to enforce a trust policy of claim 5, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity to a directly-connected second associated entity.

8. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the trust relationship comprises a description of the degree of trust.

9. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the trust policy prescribes permission of an act based on the trust relationship.

10. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the trust policy prescribes permission of access to one of a resource or a service.

11. The method of using a social relationship between associated entities to enforce a trust policy of claim 10, wherein the permission of access is a usage right to a digital work.

12. The method of using a social relationship between associated entities to enforce a trust policy of claim 1, wherein the step of determining a trust relationship further comprises receiving a specified trust relationship.

13. A method of employing a trust policy based on a social distance of associated entities who are members of a social network, the method comprising:

identifying a social network;

establishing a social distance of associated entities who comprise the social network;

determining a trust relationship between associated entities based on the social distance;

developing and employing a trust policy based on the trust relationship; and

storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

14. The method of employing the trust policy based on a social distance of associated entities who are members of a social network of claim 13, wherein the step of establishing a social distance of associated entities who comprise the social network further comprises utilizing a social distance map.

15. The method of employing the trust policy of claim 13, as a filtering criteria to identify unwanted electronic mail.

16. The method of employing the trust policy of claim 13, as a filtering criteria to provide access to a resource or a service.

17. The method of employing the trust policy of claim 16, wherein the accessed service comprises a neighborhood e-mail network.

18. The method of employing the trust policy of claim 16, wherein the accessed service comprises a ride sharing network.

19. The method of employing the trust policy of claim 16, wherein the accessed resource comprises a digital work.

20. The method of employing the trust policy of claim 13, wherein the social network further comprises an environment characterized by a common domain name.

21. The method of employing the trust policy of claim 13, wherein the associated entity includes one of a person, a company, a business, a network, a device, an object, or a group.

22. The method of employing the trust policy of claim 13, wherein the trust relationship is further determined by a type of content on a distributed network.

23. The method of employing the trust policy of claim 13, wherein the social network further comprises a user interest environment characterized by a common subject attribute.

24. A method of creating a trust policy based on a social distance of associated entities who are members of a social network, the method comprising:

identifying a social map;

determining nodes of the social map that correspond to the associated entities who are members of a social network;

constructing a social network based on the corresponding nodes of the social map;

establishing social distances between the nodes of the social map;

establishing a social distance map of nodes that comprise the social network;

determining a trust relationship between associated entities of the corresponding nodes based on the social distance map;

creating a trust policy based on the trust relationship; and

storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

25. The method of creating a trust policy of claim 24, wherein the trust relationship is calculated based on a number of hops between nodes that comprise the social network.

26. The method of creating a trust policy of claim 24, wherein the trust relationship is determined by summing up a set of social distances between nodes that comprise the social network.

27. The method of using a social relationship between associated entities to enforce a trust policy of claim 26, wherein the social distance is a numerical value assigned by a first associated entity to a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

28. The method of using a social relationship between associated entities to enforce a trust policy of claim 26, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity to a directly-connected second associated entity.

29. The method of creating a trust policy of claim 24, wherein the trust relationship is determined based on a number of hops between nodes that comprise the social network and a set of social distances between nodes that comprise the social network.

30. The method of creating a trust policy of claim 26, wherein a plurality of intermediate nodes exist resulting in a plurality of sets of social distances, the social distance used to determine the trust relationship thereby determined by the average of the sums of the sets of social distances.

31. The method of creating a trust policy of claim 26, wherein the trust relationship is calculated using Dijkstra'"'"'s shortest distance algorithm.

32. The method of creating a trust policy of claim 26, wherein the trust relationship is determined manually using discretionary criteria from one of the associated entities.

33. The method of creating a trust policy of claim 26, wherein the trust relationship is determined manually using discretionary criteria from an outside party that is not an associated entity.

34. The method of creating a trust policy of claim 33, wherein the discretionary criteria comprises a corporate policy.

35. The method of creating a trust policy of claim 24, wherein the trust relationship is determined by the geographic location of the associated entities.

36. The method of creating a trust policy of claim 24, wherein the trust relationship is determined by a corporate policy.

37. The method of creating a trust policy of claim 24, wherein the step of determining associated entities further comprises an associated entity opting-in to agree to participate in the social network.

38. The method of creating a trust policy of claim 24, wherein the step of constructing a social network further comprises an associated entity cryptographically protecting access by another associated entity to a portion of the social network.

39. The method of creating a trust policy of claim 24, wherein the step of constructing a social network further comprises an associated entity establishing a policy to protect access by another associated entity to a portion of the social network.

40. The method of creating a trust policy of claim 24, wherein the step of constructing a social network further comprises an associated entity establishing a policy to remove access by another associated entity to a portion of the social network.

41. The method of creating a trust policy of claim 24, wherein the step of constructing a social network further comprises associated entities voting to establish legitimacy and thereby modify the social network.

42. The method of creating a trust policy of claim 24, wherein the step of constructing a social network further comprises associated entities voting to establish legitimacy and thereby provide access to a portion of the social network to a new associated entity.

43. The method of creating a trust policy of claim 24 as a filtering criteria to identify unwanted electronic mail.

44. The method of creating a trust policy of claim 24 as a filtering criteria to permit access to distributed resources.

45. The method of creating a trust policy of claim 44, wherein the permitted access is a usage right to a digital work.

46. A method of enforcing a trust policy based on a social model, the method comprising:

instantiating a social model of a relationship between associated entities;

creating a trust policy to apply to the social model;

translating the social model to a social map where the relationship between associated entities is identified and links to other associated entities are established;

calculating a social distance among links between two associated entities on the social map; and

determining whether or not to grant a computational request based on the calculated social distance.

47. The method of enforcing a trust policy based on a social model of claim 46, wherein the determining step further comprises granting a computational request based on the calculated social distance if the calculated social distance conforms to a defined value and refusing to grant a computational request based on the calculated social distance if the calculated social distance fails to conform to a defined value.

48. The method of enforcing a trust policy based on a social model of claim 47, wherein the computational request further comprises delivery of electronic mail.

49. The method of enforcing a trust policy based on a social model of claim 47, wherein the computational request further comprises computer processing of instructions in a distributed network.

50. A data storage medium with computer-executable instructions for using a social relationship between associated entities to enforce a trust policy for a computing application, the medium comprising:

instructions for instantiating a relationship between associated entities using a computer;

instructions for determining a trust relationship between associated entities based on the relationships instantiated with the computer;

instructions for creating a trust policy based on a trust relationship;

instructions for storing the trust policy on a memory device; and

instructions for enforcing the trust policy for a computing application.

51. The data storage medium of claim 50, wherein the instructions for instantiating a relationship between associated entities using a computer include instructions for instantiating a plurality of relationships between associated entities.

52. The data storage medium of claim 50, wherein the instructions for instantiating a relationship include instructions for deriving the relationship from an existing computing application.

53. The data storage medium of claim 52, wherein the instructions for deriving the relationship from an existing computing application include instructions for deriving the relationship from one of Friendster®

, Linkedin™

, or Tribe®

computing applications.

54. The data storage medium of claim 50, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship based on social distance.

55. The data storage medium of claim 54, wherein the social distance is a numerical value assigned by a first associated entity to a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

56. The data storage medium of claim 54, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity and a directly-connected second associated entity.

57. The data storage medium of claim 50, wherein the trust relationship includes a description of the degree of trust.

58. The data storage medium of claim 50, wherein the instructions for creating the trust policy include instructions for prescribing permission of an act based on the trust relationship.

59. The data storage medium of claim 50, wherein the instructions for creating the trust policy include instructions for prescribing permission of access to one of a resource or a service.

60. The data storage medium of claim 59, wherein the permitted access is a usage right to a digital work.

61. The data storage medium of claim 50, wherein the instructions for determining a trust relationship include instructions for receiving a specified trust relationship.

62. A data storage medium with computer-executable instructions for employing a trust policy based on a social distance of associated entities who are members of a social network, the medium comprising:

instructions for identifying a social network;

instructions for establishing a social distance of associated entities who comprise the social network;

instructions for determining a trust relationship between associated entities based on the social distance;

instructions for developing and employing a trust policy based on the trust relationship; and

instructions for storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

63. The data storage medium of claim 62, wherein the instructions for establishing a social distance of associated entities who comprise the social network include instructions for utilizing a social distance map to determine the social distance of the associated entities.

64. The data storage medium of claim 62, wherein the instructions for storing the trust policy on a memory device permit a computer device to employ the trust policy as a filtering criterion to identify unwanted electronic mail.

65. The data storage medium of claim 62, wherein the instructions for storing the trust policy on a memory device permit a computer device to employ the trust policy as a filtering criterion to provide access to a resource or a service.

66. The data storage medium of claim 65, wherein the accessed resource is a digital work.

67. The data storage medium of claim 65, wherein the accessed service includes a neighborhood e-mail network.

68. The data storage medium of claim 65, wherein the accessed service includes a ride sharing network.

69. The data storage medium of claim 62, wherein the instructions for identifying the social network include instructions for identifying an environment characterized by a common domain name.

70. The data storage medium of claim 69, wherein the associated entity includes one of includes one of a person, a company, a business, a network, a device, an object, or a group.

71. The data storage medium of claim 62, wherein the instructions for determining the trust relationship include instructions for further determining a type of content on a distributed network.

72. The data storage medium of claim 62, wherein the instructions for identifying the social network include instructions for identifying a user interest environment characterized by a common subject attribute.

73. A data storage medium with computer-executable instructions for creating a trust policy based on a social distance of associated entities who are members of a social network, the medium comprising:

instructions for identifying a social map;

instructions for determining associated entities of the social map that correspond to the associated entities who are members of a social network;

instructions for constructing a social network based on the corresponding associated entities of the social map;

instructions for establishing social distances between the associated entities of the social map;

instructions for establishing a social distance map of associated entities that comprise the social network;

instructions for determining a trust relationship between associated entities of the corresponding associated entities based on the social distance map;

instructions for creating a trust policy based on the trust relationship; and

instructions for storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

74. The data storage medium of claim 73, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship based on a number of hops between associated entities that comprise the social network.

75. The data storage medium of claim 73, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship by summing up a set of social distances between associated entities that comprise the social network.

76. The data storage medium of claim 75, wherein the social distance is a numerical value assigned by a first associated entity to a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

77. The data storage medium of claim 75, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity and a directly-connected second associated entity.

78. The data storage medium of claim 73, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship based on a number of hops between associated entities that comprise the social network and a set of social distances between associated entities that comprise the social network.

79. The data storage medium of claim 75, wherein the instructions for constructing the social network include instructions for determining that a plurality of intermediate associated entities exist resulting in a plurality of sets of social distances, the instructions for constructing the social distance used to determine the trust relationship include instructions for determining the social distance by the average of the sums of the sets of social distances.

80. The data storage medium of claim 75, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship using Dijkstra'"'"'s shortest distance algorithm.

81. The data storage medium of claim 75, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship manually using discretionary criteria from one of the associated entities.

82. The data storage medium of claim 75, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship manually using discretionary criteria from an outside party that is not an associated entity.

83. The data storage medium of claim 82, wherein the discretionary criteria includes a corporate policy.

84. The data storage medium of claim 73, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship based upon the geographic location of the associated entities.

85. The data storage medium of claim 73, wherein the instructions for determining the trust relationship include instructions for determining the trust relationship based upon a corporate policy.

86. The data storage medium of claim 73, wherein the instructions for determining associated entities further include instructions to permit an associated entity to opt-in to agree to participate in the social network.

87. The data storage medium of claim 73, wherein the instructions for constructing a social network include instructions for an associated entity to cryptographically protect access by another associated entity to a portion of the social network.

88. The data storage medium of claim 73, wherein the instructions for constructing a social network further include instructions for an associated entity to establish a policy to protect access by another associated entity to a portion of the social network.

89. The data storage medium of claim 73, wherein the instructions for constructing a social network further include instructions for an associated entity to establish a policy to remove access by another associated entity to a portion of the social network.

90. The data storage medium of claim 73, wherein the instructions for constructing a social network further include instructions for associated entities to vote to establish legitimacy and thereby modify the social network.

91. The data storage medium of claim 73, wherein the instructions for constructing a social network further include instructions for associated entities to vote to establish legitimacy and thereby provide access to a portion of the social network to a new associated entity.

92. The data storage medium of claim 73, wherein the instructions for storing the trust policy on a medium permit a computer device to employ the trust policy as a filtering criterion to identify unwanted electronic mail.

93. The data storage medium of claim 73, wherein the instructions for storing the trust policy on a medium permit a computer device to employ the trust policy as a filtering criterion to permit access to distributed resources.

94. The data storage medium of claim 93, wherein the permitted access is a usage right to a digital work.

102. The computer system to enforce a trust policy of claim 93, wherein the means for instantiating a relationship includes means for deriving the relationship from an existing computing application.

103. The computer system to enforce a trust policy of claim 102, wherein the existing computing application comprises one of Friendster®

, Linkedin™

, or Tribe®

.

95. A data storage medium with computer-executable instructions for enforcing a trust policy based on a social model, the medium comprising:

instructions for instantiating a social model of real-world relationships between associated entities;

instructions for creating a trust policy to apply to the social model;

instructions for translating the social model to a social map where each associated entity is identified and links to other associated entities are established;

instructions for calculating a social distance among links between two associated entities on the social map; and

instructions for determining whether or not to grant a computational request based on the calculated social distance.

96. The data storage medium of claim 95, wherein the instructions for determining whether or not to grant a computational request based on the calculated social distance include instructions for granting a computational request based on the calculated social distance if the calculated social distance conforms to a defined value and refusing to grant a computational request based on the calculated social distance if the calculated social distance fails to conform to a defined value.

97. The data storage medium of claim 96, wherein the computational request includes delivery of electronic mail.

98. The data storage medium of claim 96, wherein the computational request includes computer processing of instructions in a distributed network.

99. The data storage medium of claim 96, wherein the computational request includes a usage right to a digital work.

100. A computer system for using a social relationship between associated entities to enforce a trust policy for a computing application, the computer system comprising:

means for instantiating a relationship between associated entities using a computer;

means for determining a trust relationship between associated entities based on the relationships instantiated with the computer;

means for creating a trust policy based on a trust relationship;

means for storing the trust policy on a memory device; and

means for enforcing the trust policy for a computing application.

101. The computer system to enforce a trust policy of claim 100, wherein the means for instantiating a relationship between associated entities instantiates a plurality of relationships.

104. The computer system to enforce a trust policy of claim 100, wherein means for determining the trust relationship determines the trust relationship based on social distance.

105. The computer system to enforce a trust policy of claim 104, wherein the social distance is a numerical value assigned by a first associated entity to a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

106. The computer system to enforce a trust policy of claim 104, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity and a directly-connected second associated entity.

107. The computer system to enforce a trust policy of claim 100, wherein the trust relationship includes a description of the degree of trust.

108. The computer system to enforce a trust policy of claim 100, wherein the trust policy prescribes permission of an act based on the trust relationship.

109. The computer system to enforce a trust policy of claim 100, wherein the trust policy prescribes permission of access to one of a resource or a service.

110. The computer system to enforce a trust policy of claim 109, wherein the permitted access is a usage right to a digital work.

111. The computer system to enforce a trust policy of claim 100, wherein the means for determining a trust relationship includes means for receiving a specified trust relationship.

112. A computer system for employing a trust policy based on a social distance of associated entities who are members of a social network, the computer system comprising:

means for identifying a social network;

means for establishing a social distance of associated entities who comprise the social network;

means for determining a trust relationship between associated entities based on the social distance;

means for developing and employing a trust policy based on the trust relationship; and

means for storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

113. The computer system of claim 112, wherein the means for establishing a social distance of associated entities who comprise the social network include means for utilizing a social distance map.

114. The computer system of claim 112, wherein the means for storing the trust policy on a memory device include means for permitting a computer device to employ the trust policy as a filtering criteria to identify unwanted electronic mail.

115. The computer system of claim 112, wherein the means for storing the trust policy on a memory device include means for permitting a computer device to employ the trust policy as a filtering criteria to provide access to a resource or a service.

116. The computer system of claim 115, wherein the accessed service includes a neighborhood e-mail network.

117. The computer system of claim 115, wherein the accessed service includes a ride sharing network.

118. The computer system of claim 115, wherein the accessed resource is a digital work.

119. The computer system of claim 112, wherein the social network includes an environment characterized by a common domain name.

120. The computer system of claim 112, wherein the associated entity includes one of a person, a company, a business, a network, a device, an object, or a group.

121. The computer system of claim 112, wherein the means for determining the trust relationship include means for determining the trust relationship based upon a type of content on a distributed network.

122. The computer system of claim 112, wherein the means for identifying the social network include means for identifying the social network based upon a user interest environment characterized by a common subject attribute.

123. A computer system for creating a trust policy based on a social distance of associated entities who are members of a social network, the computer system comprising:

means for identifying a social map;

means for determining nodes of the social map that correspond to the associated entities who are members of a social network;

means for constructing a social network based on the corresponding nodes of the social map;

means for establishing social distances between the nodes of the social map;

means for establishing a social distance map of nodes that comprise the social network;

means for determining a trust relationship between associated entities of the corresponding nodes based on the social distance map;

means for creating a trust policy based on the trust relationship; and

means for storing the trust policy on a memory device to thereby permit a computer device to employ the trust policy.

124. The computer system of claim 123, wherein means for determining the trust relationship include means for determining the trust relationship based on a number of hops between nodes that comprise the social network.

125. The computer system of claim 123, wherein the means for determining the trust relationship include means for determining the trust relationship by summing up a set of social distances between nodes that comprise the social network.

126. The computer system of claim 125, wherein the social distance is a numerical value assigned by a first associated entity and a directly-connected second associated entity that indicates a degree of trust that the first associated entity has in the second associated entity.

127. The computer system of claim 125, wherein the social distance is a numerical value assigned by a third party that is indicative of the degree of trust that the third party has in the relationship between a first associated entity and a directly-connected second associated entity.

128. The computer system of claim 123, wherein the means for determining the trust relationship include means for determining the trust relationship based on a number of hops between nodes that comprise the social network and a set of social distances between nodes that comprise the social network.

129. The computer system of claim 125, wherein a plurality of intermediate nodes exist resulting in a plurality of sets of social distances, the means for establishing social distances between the nodes to determine the trust relationship thereby determining the trust relationship based upon the average of the sums of the sets of social distances.

130. The computer system of claim 125, wherein the means for determining the trust relationship include means for determining the trust relationship using Dijkstra'"'"'s shortest distance algorithm.

131. The computer system of claim 125, wherein the means for determining the trust relationship include means for determining the trust relationship manually using discretionary criteria from one of the associated entities.

132. The computer system of claim 125, wherein the means for determining the trust relationship include means for determining the trust relationship manually using discretionary criteria from an outside party that is not an associated entity.

133. The computer system of claim 132, wherein the discretionary criteria comprises a corporate policy.

134. The computer system of claim 123, wherein the means for determining the trust relationship include means for determining the trust relationship based upon the geographic location of the associated entities.

135. The computer system of claim 123, wherein the means for determining the trust relationship include means for determining the trust relationship based upon a corporate policy.

136. The computer system of claim 123, wherein the means for determining a trust relationship between associated entities include means for an associated entity to opt-in to agree to participate in the social network.

137. The computer system of claim 123, wherein the means for constructing a social network include means for an associated entity to cryptographically protect access by another associated entity to a portion of the social network.

138. The computer system of claim 123, wherein the means for constructing a social network include means for an associated entity to establish a policy to protect access by another associated entity to a portion of the social network.

139. The computer system of claim 123, wherein the means for constructing a social network include means for an associated entity to establish a policy to remove access by another associated entity to a portion of the social network.

140. The computer system of claim 123, wherein the means for constructing the social network include means for associated entities to vote to establish legitimacy and thereby modify the social network.

141. The computer system of claim 123, wherein the means for constructing a social network include means for associated entities to vote to establish legitimacy and thereby provide access to a portion of the social network to a new associated entity.

142. The computer system of claim 123, wherein the means for storing the trust policy on a memory device permit a computer device to employ the trust policy as a filtering criterion to identify unwanted electronic mail.

143. The computer system of claim 123, wherein the means for storing the trust policy on a memory device permit a computer device to employ the trust policy as a filtering criterion to permit access to distributed resources.

144. The computer system of claim 143, wherein the permitted access is a usage right to a digital work.