Ebay, Incorporated

Liam Sean Lynch

Upendra S Mardikar

Christopher John Kasten

Rajesh Kanungo

Raju Venkata Kolluru

Michael Dean Kleinpeter

Shashi Seth

A computer-implemented system and method for pool-based identity generation and use for service access is disclosed. The method in an example embodiment includes seeding an identity generator with a private key; retrieving independently verifiable data corresponding to a service consumer; using the independently verifiable data to create signed assertions corresponding to the service consumer; generating a non-portable identity document associated with the service consumer, the identity document including the signed assertions; signing the identity document with the private key; and conveying the signed identity document to the service consumer via a secure link.

System and method for pool-based identity generation and use for service access

A method and a system to provide identity encapsulated cryptography are provided. A method may comprise receiving a user key to access a service. The service may be provided by an enterprise and hosted within a public cloud. A request for a country key assigned to a country of a user is transmitted and the country key is received. Session data resulting from the use of the service hosted within the public cloud is encrypted using the user key and the user key is encrypted using the country key. The encrypted session data and the encrypted user key are stored in the public cloud. The country key may be provided to a legal agency of the country of the user to decrypt session data of the user and to not decrypt session data of other users of another country.

Systems and methods for identity encapsulated cryptography

A method, apparatus, and system are provided for authenticating a user. According to one embodiment, a request for authentication of a user is received via a secondary site, the request for authentication of the user including user information corresponding to the user. The user information is verified and, based on the verifying, a token associated with the user is generated, the token to be used to enable the secondary site to perform a task on the primary site on behalf of the user. The token is then transmitted to the secondary site.

Method and apparatus to authenticate and authorize user access to a system

A system and method for securely storing sensitive customer data in a network-based commerce system such that encryption keys are not exposed to the system is described. Sensitive customer data is received via a network connection through an application interface. A symmetric key is generated, and the sensitive customer data is encoded with the symmetric key. The symmetric key is encoded with an asymmetric key and the encoded sensitive customer data and the encoded symmetric key are placed in a self-describing data-structure. The encoded sensitive customer data and the encoded symmetric key are stored in a database.

Method and system to securely store customer data in a network-based commerce system

A method and a system for access authentication. A shared services resource includes a second factor authentication module. At least one network resource each include a first factor authentication module. A trusted computing base communicates with the shared services and the at least one network resource through a pipe. An assertion may be obtained on a trusted computing base for accessing at least one network resource. At least one of the at least one network resource may be accessed with the trusted computing base when the assertion has been obtained by the trusted computing base and is valid.

Method and system for access authentication

A method, apparatus, and system are provided for authenticating and authorizing user access to a system. According to one embodiment, a request for authentication and authorization of a user is received from a secondary site on behalf of the user who is seeking to access a primary site via the secondary site via a computer network. The request includes information relating to the user. The user information is then verified for authenticity, including determining whether the user satisfies the criteria for obtaining authentication and authorization as defined by the primary site. If the criteria are satisfied, a token, associated with the user, is generated at the primary site. A portion of the token is transmitted from the primary site to the secondary site on behalf of the user to permit the user to access the primary site via the secondary site, via the computer network.

Growing community of inventors

San Jose, CA, United States of America

Liam Sean Lynch