light-weight cryptographic authorisation framework