Determining access includes determining if particular credentials/proofs indicate that access is allowed, determining if there is additional data associated with the credentials/proofs, wherein the additional data is separate from the credentials/proofs, and, if the particular credentials/proofs indicate...http://www.google.com/patents/US7600129?utm_source=gb-gplus-sharePatent US7600129 - Controlling access using additional data