Microsoft Technology Licensing, LLC

Guillermo P Proano

Ankur Patel

Brandon Brian Murdoch

Sydney Morton

Nithya Ganesh

Maria Balsamo

Dirk Myers

Peter Gilmore Dodd

Richard Harvey James Orr

Kimberly Maughan Saunders

Edward James Lehman

Brandon Murdoch

Encrypting a verifiable credential (VC) and generating one or more instructions, at least one of which grants a scope of permission associated with the VC to the relying entity. The scope of permission includes permission to access a subset of data contained in the VC or a portion of data that can be derived from data contained in the VC. The encrypted VC and the one or more instructions are sent to the credential issuer or the relying entity to cause the credential issuer to generate a response containing the subset of data or the derived data and a proof code. The proof code is configured to prove the validity of the subset of data or the derived data.

Encrypted verifiable credentials

Systems are methods are used for facilitating identify anonymization by using controlled masking and encryption of user identifiers, such as UUIDs. A system that manages a UUID converts the UUID into a set of one or more different unique versions of the UUID for one or more corresponding different partner system(s) by removing and replacing masked portions of the UUID and by selectively encrypting the non-masked portions of the UUID. New masked portions added to the new version(s) of the UUID identify different corresponding partner(s) and/or rules to be applied by the different partner(s) when handling the different unique version(s) of the UUID(s). Partner systems that receive the new versions of the UUID identify and utilize the new masked portions to deterministically control decrypting and/or other processing of the new version of the UUID.

Identity anonymization with controlled masking and format preserving encryption

Upgrading of a verifiable credential by a user interfacing with an upgrade control of a visualization of the verifiable credential. The upgradable verifiable credential includes an authorization claim specifying an authorization scope, and an enhancement claim specifying a condition for enhancing the specified authorization scope. A visualization of the upgradable verifiable credential is then display with the upgrade control to a user of a holder computing system that is the holder of the verifiable credential. Accordingly, if the user interacts with the upgrade control, the condition for upgrading the verifiable credential may be accomplished. The issuer of the authorization claim may then be notified of this. The issuer may then provide an ungraded verifiable credential that includes an authorization claim that includes more or a different authorization scope than the prior verifiable credential.

Visualization-assisted upgrade of verifiable credential

Updating a verifiable claim so that a duration of the verifiable claim can be modified without direct user input. A plurality of verifiable claims that have previously been issued to a user are accessed by a computing system. The plurality of verifiable claims include duration metadata that defines a duration of each of the plurality of verifiable claims. The duration metadata of each of the plurality of verifiable claims is monitored to determine those of the plurality of verifiable claims that are set to expire based on the defined duration. For those verifiable claims that are set to expire, a request is made to a party that issued each verifiable claim for update information that is configured to modify the duration of each verifiable claim. In response to receiving the update information, the duration of each verifiable claim is automatically updated without the need for any direct user input.

Automatic renewal of a verifiable claim

Embodiments are directed to creating a persona from observed characteristics of content and to sharing a network persona derived from observed characteristics of content. In one scenario, a computer system observes one set of properties for a first portion of content on a network. The first portion of content is from a first account. The computer system also observes a different set of properties for a second portion of content on the network, where the second portion of content is from a second account. The computer system then correlates an association between the first account and the second account as part of a network persona that is based on the first properties and one or more corresponding properties from the second portion of content.

Growing community of inventors

Kirkland, WA, United States of America

Guillermo P Proano