T-Central, Inc.

Springcoin, Inc.

Google Inc.

Certicom Corporation

Digital Video Express, L.p.

International Business Machines Corporation

Motorola Solutions, Inc.

Blackberry Corporation

Dolby Laboratories Licensing Corporation

General Instrument Corporation

David W Kravitz

Russell S Dietz

Donald Houston Graham, Iii

Josselyn L Boudett

Matthew Benjamin Smith

Gregory Marc Zaverucha

Mollie Zechlin Halverson

Daniel Richard L Brown

David Moshe Goldshlag

Kent William Stacy

Dulce Beatriz Ponceleon

David Moshe Goldschlag

Diego A Masini

John B Geagan, Iii

Jamie Lynn Juarez

Mark A Gannon

Robert W Schumann

Joshua B Hurwitz

James Chester Jones

John Richard Kane

Michael A Bergeron

Brian Keith Smith

Guillaume Mercier

Siu-Leong Iu

Jack Ehrhardt

Richard Vitkus

Richard Whittemore

Michael Young

Mollie Johanna Zechlin

Fabrice Cheng

Alessandro Sorniotti

Elli Androulaki

Petr Peterka

Angelo De Caro

Morris A Moore

James M Jones

Thorsten Kramp

Andres Garagiola

Douglas A Kuhlman

Raul Laprida

Sandeep M Adwankar

Paul Montague

David M Goldschlag

Robert Zbigniew Krzyzanowski

John Sun

Ashwini Rao

Christopher Daniel Neckar

Randy Eye

Donald Houston Iii Graham

A central server configured with an Attribute Authority ('AA') acting as a Trusted Third Party mediating service provider and using X.509-compatible PKI and PMI, VPN technology, device-side thin client applications, security hardware (HSM, Network), cloud hosting, authentication, Active Directory and other solutions. This ecosystem results in real time management of credentials, identity profiles, communication lines, and keys. It is not centrally managed, rather distributes rights to users. Using its Inviter-Invitee protocol suite, Inviters vouch for the identity of Invitees who successfully complete the protocol establishing communication lines. Users establish and respond to authorization requests and other real-time verifications pertaining to accessing each communication line (not end point) and sharing encrypted digital files. These are auditable, brokered, trusted-relationships where such relationships/digital agreements can each stand-alone (for privacy) or can leverage build-up of identity confidence levels across relationships. The service is agnostic to how encrypted user content is transported or stored.

System and method to enable PKI- and PMI-based distributed locking of content and distributed unlocking of protected content and/or scoring of users and/or scoring of end-entity access means—added

Participants as requestors using a requesting network element request one or more tokenization processors to generate tokens that represent a sanitized version of data such that the resultant tokens are amenable to comparison across participants. As circumstances warrant, one or more such tokens can be submitted to the tokenization processor(s) to privately retrieve the original data. Role-based access control scope parameters and tokenization processor-specific tokenization processor secrets can be embedded into reversible tokens that remain invariant under updating of the tokenization processor secrets across tokenization processors. By another approach, role-based access control scope parameters and tokenization processor-specific tokenization processor secrets are embedded into tokens and corresponding key tokens such that upon authorized presentation of a token by a requestor, the corresponding key token is recovered so that the keying material that was used to generate ciphertext is retrievable in order to recover the corresponding plaintext.

Method and apparatus for reversible tokenization with support for embeddable role-based access control

Method for utilizing a communication line certificate corresponding to a first device and a second device for a communication line, each of the first and second devices including a hardware processor and associated memory includes: creating a unique ID, by a third electronic device; transmitting the unique ID to the first generating a digitally signed request by the first device, wherein the digitally signed request comprises a first proof of an association of the first device to the communication line; transmitting the digitally signed request to the second device; verifying the first proof by the second device to produce a first verification of the association of the first device to the communication line; and generating a digitally signed acceptance by the second device, wherein the digitally signed acceptance comprises a second proof of an association of the second device to the communication line.

Using PKI for security and authentication of control devices and their data

Method for authenticating a first and a second electronic devices associated through a communication line includes: creating a unique ID, by a third electronic device; transmitting the unique ID to the first electronic device; signing the transmitted unique ID by the first electronic device; transmitting the signed unique ID to the second electronic device, by the first electronic device; signing the transmitted signed unique ID by the second electronic device; transmitting the unique ID signed by the first and second electronic devices to the third electronic device; verifying and accepting the unique ID signed by the first device and the second device, by the third device; issuing a certificate for a secure communication line between the first electronic device and the second electronic device; and transmitting the certificate to the first electronic device and the second electronic device.

A protocol that is managed by a coordinating network element or third-party intermediary or peer network elements and utilizes tokens prohibits any subset of a union of the coordinating network element or third-party intermediary, if any, and a proper subset of the processors involved in token generation from substantively accessing underlying data. By one approach, processors utilize uniquely-held secrets. By one approach, an audit capability involves a plurality of processors. By one approach, the protocol enables data transference and/or corroboration. By one approach, transferred data is hosted independently of the coordinating network element. By one approach, the coordinating network element or third-party intermediary or a second requesting network element is at least partially blinded from access to tokens submitted by a first requesting network element. By one approach, a third-party intermediary uses a single- or consortium-sourced database. By one approach, network elements provisioned with tokens jointly manage the protocol.

Method and apparatus for third-party managed data transference and corroboration via tokenization

A coordinating network element manages a protocol that makes attestations of off-platform-resolved data and decisions available for use on a blockchain platform or on another decentralized-execution-based platform operational within a multi-tenant environment. By one approach, these teachings provide for off-platform-verified data pertaining to individual-, group- or machine-based users to be blinded from access by the coordinating network element and by the platform while utilizing a tokenized form of such data to enable user-initiated queries that involve solely on-platform vetting of users as a condition of fulfilling user requests for service.

Method and apparatus for utilizing off-platform-resolved data as an input to code execution on a decentralized platform

A coordinating network element manages a protocol that prohibits the coordinating network element from substantively accessing data content that, at least in part, underlies received protocol-compliant requests. By one approach, these teachings provide for preventing substantive access to data information that is included within the protocol-compliant request in tokenized form, wherein the tokens are generated using secrets, at least one of which is unavailable to the coordinating network element.

Method and apparatus for effecting a data-based activity

System and method to enable PKI- and PMI-based distributed locking of content and distributed unlocking of protected content and/or scoring of users and/or scoring of end-entity access means&#x2014;added

A third-party intermediary manages a protocol that prohibits the third-party intermediary from substantively accessing data content that, at least in part, underlies received protocol-compliant requests. By one approach, these teachings provide for preventing substantive access to data information that is included within the protocol-compliant request as one or more functions of data, parts of which data may be in tokenized or untokenized form, wherein the values of the functions are generated using secrets, at least one of which is unavailable to the third-party intermediary. By one approach, tokens comprised of data in tokenized form are generated using secrets, at least one of which is unavailable to the third-party intermediary.

One example method may include generating a template transaction certificate by one or more entities which verify proof of ownership of attributes incorporated into the template transaction certificate, and generating one or more operational transaction certificates by the one or more entities which verified proof of ownership of the template transaction certificate.

Template-based distributed certificate issuance in a multi-tenant environment

Growing community of inventors

Fairfax Station, VA, United States of America

David W Kravitz