Trust Brokers are Internet servers, which provide a simple and consistent API for interacting with many diverse Internet-based Trust Services able to authenticate user identity, verify user credentials, create audit trails, or enforce other policies.  When a request comes to a Trust Broker, the Trust Broker examines the accompanying security policy and then invokes the Trust Services needed to execute that policy.

Resilient’s other server, the Access Server, is a free web server deployed by our users "in front" of any protected resource to intercept HTTP requests.  Before allowing a request to proceed it selects and invokes a Trust Broker passing a security policy. The Trust Broker evaluates the policy and then coordinates the actions of Trust Services to validate the user or prove that policy has been enforced. When validation is complete the Trust Broker returns the go-ahead to the Access Server and the Access Server allows the user to proceed. The owner of the Access Server can choose which Trust Broker it "points" to depending on which vendors it trusts the most.  Access Servers will be hosted widely. Trust Brokers will only be hosted by a handful of highly-vetted and trusted entities.

The Access Server is also a web development platform.  It can be used to either customize or develop new web front-ends to almost any back-end application. Using the Access Server, clients can develop and control applications for their own protected content or develop composite applications from other “published” network resources such as analytics, data or policy services. These composite applications can be more sophisticated than existing "mash-ups" because the obstacles around data use rights and security are handled by the individual components, not the composite application itself.