Reference encryption for access right segregation and domain representation