The CareEvolution RHIO platform implements a brokered authentication mechanism using Public Key Infrastructure (PKI). This trust brokerage service, also known as a Security Token Service (STS), allows messages to carry identity information. Using PKI and X.509 certificates messages are both encrypted and signed, providing data origin authentication, data confidentiality, and message integrity.