Microsoft Technology Licensing, LLC

Christian Paquin

Craig Henry Wittenberg

Rushmi U Malaviarachchi

Karin Strauss

Sergey M Yekhanin

Tolga Acar

Yuan-Jyue Chen

Melissa Erin Chase

Duy Lan Nguyen

Alexander Steven Crown

Gregory R Thompson

Molecular anti-counterfeiting taggants are made from a plurality of synthetic polynucleotides that collectively encode a bit sequence using the sequences and hybridization states of the polynucleotides. The polynucleotide taggant is placed on an item as a molecular identifier of authenticity. The bit sequence encoded by the polynucleotide taggant is read out using a substrate which has bound polynucleotides complexes that hybridize with the synthetic polynucleotides in the polynucleotide taggant. A detectable signal is present where hybridization occurs. To prevent a bad actor from reverse engineering and creating a copy of the polynucleotide taggant using the results of hybridization to the substrate, multiple versions of the substrate are created. Each version hybridizes to different subsets of the synthetic polynucleotides in the polynucleotide taggant. A detectable pattern on the substrate that is present when exposed to the polynucleotide taggant is used for validating authenticity of the item.

Anti-counterfeit polynucleotide taggants

The subject disclosure is directed towards credential verification for accessing a service provider. A user may prove to the service provider the validity of the credential by communicating a non-revocation component that is based upon a prime-order cryptographic group without a bilinear pairing. In order to authenticate the user, a verification mechanism within an identity management system applies private cryptographic data, including a verifier-designated private key to the non-revocation component, which proves that the user's identity and therefore, the credential is not revoked. The presentation proof includes a hash value that is computed using the credential's commitment and the prime-order cryptographic group. By verifying that the hash value was computed using that commitment, the verification mechanism validates the credential and permits access to the service provider.

Minimal disclosure credential verification and revocation

Binding a security artifact to a service provider. A method includes generating a pseudonym for a security artifact. The pseudonym is an identifier of the security artifact to the service provider that is unique to the service provider in that the pseudonym is not used to identify the security artifact to other service providers. Further, the pseudonym uniquely identifies the particular security artifact to the service provider even when a user has available a number of different security artifacts to authenticate to the same service provider to access a user account for the user. The method further includes providing the pseudonym for the security artifact to the service provider. The pseudonym for the security artifact is bound with a user account at the service provider for a user associated with the security artifact.

Cryptographic device that binds an additional authentication factor to multiple identities

A privacy-preserving identity system is described herein that combines low disclosure tokens with an identity metasystem to allow proof of a user's identity and other claims about the user in a manner that preserves the user's privacy by avoiding disclosing unnecessary information about the user. A low or minimal disclosure token is a security token that encodes claims in such a way that (1) the token can be long-lived, (2) the token can be presented in an unlinkable manner, or (3) the user can minimally disclose the encoded information to respond to an unanticipated Relying Party policy. Using the privacy preserving system within an identity metasystem, users can obtain long-lived, low disclosure tokens from the Identity Provider and later present them to Relying Parties; thus improving both users' privacy and the system's scalability.

Preserving privacy with digital identities

Growing community of inventors

Redmond, WA, United States of America

Christian Paquin