Trusted information exchange based on trust agreements
Techniques are provided for allowing organizations to preserve the trust and allow this trust to be propagated across multiple agencies and/or enterprises. A technology is provided that allows (mutually) trusted entities to share content (information, digital assets) over any protocol-based network such as the Internet based on granted rights and agreed conditions. In one embodiment, Trusted Information Exchange (TIE) systems have a Service Oriented Architecture (SOA) and use content (information, asset) repositories to store and forward content to trusted entities on the Internet. Techniques are provided to permit source TIE systems to manage the specific disposition and management of their assets to receiving TIE systems through directions conveyed in licenses that reflect apriori agreements.
1. A method of exchanging digital information, comprising:
sending over a network system, from a first system controlled by a first party, to a second system controlled by a second party, a subscription agreement that is digitally signed by the first party and includes a digital identity of the second party;
wherein the subscription agreement defines characteristics of digital assets that are covered by the subscription agreement;
wherein the subscription agreement licenses the second party to perform a set of operations relative to digital assets that have said characteristics;
receiving at the first system, from the second system, a subscription agreement confirmation that is digitally signed by the second party;
after receiving the subscription agreement confirmation, the first system identifying a digital asset that has said characteristics;
prior to providing the digital asset to the second system, sending from the first system to the second system a trust agreement that is digitally signed by the first party and includes the digital identity of the second party;
wherein the trust agreement licenses the second party to perform said set of operations relative to said digital asset;
receiving at the first system, from the second system, a trust agreement confirmation that is digitally signed by the second party;
after the trust agreement confirmation is received by the first system, the first system providing the digital asset to the second system; and
wherein the method is performed by one or more machines programmed to be special purpose machines pursuant to instructions from program software.
2. The method of claim 1 wherein the subscription license includes an embedded license that specifies all terms of the asset license.
3. A non-transitory computer-readable storage medium storing one or more sequences of instructions which, when executed by one or more processors, causes:
sending over a network system, from a first system controlled by a first party, to a second system controlled by a second party, a subscription agreement that is digitally signed by the first party and includes a digital identity of the second party;
wherein the subscription agreement defines characteristics of digital assets that are covered by the subscription agreement;
wherein the subscription agreement licenses the second party to perform a set of operations relative to digital assets that have said characteristics;
receiving at the first system, from the second system, a subscription agreement confirmation that is digitally signed by the second party;
after receiving the subscription agreement confirmation, the first system identifying a digital asset that has said characteristics;
prior to providing the digital asset to the second system, sending from the first system to the second system a trust agreement that is digitally signed by the first party and includes the digital identity of the second party;
wherein the trust agreement licenses the second party to perform said set of operations relative to said digital asset;
receiving at the first system, from the second system, a trust agreement confirmation that is digitally signed by the second party;
after the trust agreement confirmation is received by the first system, the first system providing the digital asset to the second system; and
wherein the method is performed by one or more machines programmed to be special purpose machines pursuant to instructions from program software.
4. The non-transitory computer-readable storage medium as recited in claim 3 , wherein the subscription license includes an embedded license that specifies all terms of the asset license.