A method and apparatus for establishing a secure communications channel between
a first repository and a second repository using a repository transaction protocol.
A registration identifier and registration message including an identification
certificate, and an identifier of a master repository that encrypted the identification
certificate are generated by the first repository. The registration identifier
and message are sent to the second repository and the identity of the first repository
by is verified by verifying the identification certificate. Messages containing
at least one session key are exchanged between the first and second repositories
and a usage transactions related to a digital work are conducted between the first
repository and the second repository using the session keys.