International Business Machines Corporation

Anonyome Labs, Inc.

Globalfoundries Inc.

Paul Anthony Ashley

Greg Clark

Steve Shillingford

Steven Harvey McCown

John David Mumford

Simon Gee

Anthony M Butler

Ravi Kothari

Yu-Chen Lin

Sridhar R Muppidi

Mark Vandenwauver

Carsten Hagemann

Tim Bartley

Ronald B Williams

Neil Readshaw

Ashish Kundu

Nataraj Nagaratnam

Dimitrios Pendarakis

Sreekanth Ramakrishna Iyer

He Huang

Tian Cheng Liu

Stefan Berger

John William Court

Matthew Poulton

Cheng-Ta Lee

Christopher John Hockings

Christopher Y Choi

Simon Canning

Glen Leeder

George Mulhearn

Wenjing Wang

Phong Le

Dennis Wilkins

Mike Neuenschwander

Stephen Sartor

Ghada M ElKeissi

Leny Veliyathuparambil

Christopher Choi

An apparatus includes a hardware security module with a connection to a client device executing a mobile wallet application. The hardware security module includes hardware security module computer code instructions executed by a processor to store a private key, and supply a signature signed by the private key in response to a request from the client device that uses the signature to communicate with a decentralized identity wallet.

Hardware security module to control a cloud decentralized identity wallet

A non-transitory computer readable storage medium has instructions executed by a processor to host a digital verified credential exchange in network communication with different verified credential operating environments. The digital verified credential exchange has a verified credential exchange engine in network communication with user and system interfaces for interacting with a verified credential holder machine, a credential database, a verified credential operating environment operating attributes database, an exchanged verified credential database, and an exchanged verified credential status monitor. The digital verified credential exchange automatically forms a reissued digital verified credential from a first verified credential operating environment for execution in a second verified credential operating environment.

Apparatus and method for cross-domain digital verifiable credential exchange

A machine has a network interface circuit to provide connectivity to networked machines. A processor is connected to the network interface circuit. A memory is connected to the processor and the network interface circuit. The memory stores instructions executed by the processor to record the purchase of a digital asset by a user at a client machine from a data source machine in network communication with the client machine. The location of the digital asset on one or more machines of the networked machines is archived. The location is separate from the data source machine. The digital asset is associated with a data access policy. A request for the digital asset is received. The data access policy is enforced through programmatic control utilized by one or more of the networked machines to form a consent state. Distribution of the digital asset to a networked machine is authorized in response to the consent state.

Apparatus and method for persistent digital rights management

A non-transitory computer readable storage medium with instructions executed by a processor maintains different digital identities for different internet browsing personas associated with a real user. Persona selection rules are invoked to automatically designate a selected digital identity for a current internet browsing session. Browser state for the selected digital identity is loaded.

Persona based privacy browser

A non-transitory computer readable storage medium has instructions executed by a processor to maintain digital identities. Each digital identity has identity attributes different than identity attributes associated with a real individual utilizing the digital identity. Each digital identity has an associated attribute for compartmentalized network activity. Interactions between the digital identities and a virtual card provider are supported to secure virtual cards for the digital identities. Interactions between the digital identities and a persona management application are brokered, including delivering the virtual cards for the digital identities to the persona management application.

Apparatus and method for processing virtual credit cards for digital identities

A non-transitory computer readable storage medium has instructions executed by a processor to maintain a digital wallet with digital identities. Each digital identity has identity attributes different than identity attributes associated with a real individual utilizing the digital identity, an associated attribute for compartmentalized network activity, a digital identity key pair, and a designated block chain. Interactions between the digital identities of the digital wallet and a digital identity services platform are supported.

Digital wallet for digital identities and interactions with a digital identity services platform

An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to store identity attributes including real identity attributes for a real individual and at least two sets of digital identity attributes each operative as a personal privacy proxy with compartmental identity attributes. The at least two sets of digital identity attributes each include a digital identity name, a digital identity mobile device number and a digital identity email address. The at least two sets of digital identity attributes are evaluated to produce a similarity measure. The real individual is provided with a recommendation based upon the similarity measure.

Apparatus and method for evaluating and modifying data associated with digital identities

An apparatus has a persona services platform in communication with a user device via a network and a selected isolation browser provider via the network. The persona services platform is configured to receive from the user device a request for an isolation browser. The selected isolation browser provider is designated from a pool of isolation browser providers. Isolation browser configuration information is requested from the selected isolation browser provider. The isolation browser configuration information is augmented with persona specific configuration information to form complete isolation browser configuration information. The complete isolation browser configuration information is sent to the user device.

Apparatus and method for persona based isolation browsing

An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to compute computer network activity reputation attributes for a digital identity. The digital identity has identity attributes different than identity attributes associated with a real individual utilizing the digital identity for computer network activity. The storage of the computer network activity reputation attributes for the digital identity is coordinated within a block chain system distributed across a block chain network of computers. Computer network activity reputation attributes for the digital identity are supplied in response to a request from a machine. The computer network activity reputation attributes are communicated over a network of computers to the machine.

Apparatus and method for establishing trust of anonymous identities

A machine has a network interface circuit to provide connectivity to networked machines. A processor is connected to the network interface circuit. A memory is connected to the processor and the network interface circuit. The memory stores cryptographically protected data, an identity management contract and identity stewards specifying individuals to administer the identity management contract. The memory stores instructions executed by the processor to receive a request to identify a legal identity for a digital identity, collect from certain networked machines, via the network interface circuit, consent from the identity stewards, where the consent includes cryptographic identity packets. The cryptographic identity packets are combined to render the legal identity for the digital identity. Transaction data specifying the legal identity for the digital identity is supplied. The transaction data is recorded to a distributed ledger associated with at least a subset of the networked machines.

Apparatus and method for managing digital identities and controlling their correlation to legal identities

A machine has a network interface circuit to provide connectivity to networked machines. A processor is connected to the network interface circuit. A memory is connected to the processor and the network interface circuit. The memory stores cryptographically protected data, a data access policy and a steward group specifying individuals to administer the data access policy. The memory stores instructions executed by the processor to receive a request to access the cryptographically protected data. Authentication tokens from individuals in the steward group are collected. It is determined that the authentication tokens satisfy the data access policy to establish a data access state. A decrypted version of the cryptographically protected data is supplied to one or more of the networked machines to establish a transaction. The transaction is recorded with a distributed ledger associated with at least a subset of the networked machines.

Apparatus and method for enabling owner authorized monitored stewardship over protected data in computing devices

An apparatus has a processor and a memory connected to the processor. The memory stores instructions executed by the processor to store identity attributes including real identity attributes for a real individual and a digital identity with digital identity data attributes operative as a personal privacy proxy for the real individual. Web site input forms are automatically filled alternately using the real identity attributes and the digital identity attributes.

Apparatus and method to automate website user interface navigation

An apparatus includes a processor and a memory connected to the processor. The memory stores instructions executed by the processor to store identity attributes including real identity attributes for a real individual and a digital identity with digital identity data attributes operative as a personal privacy proxy for the real individual. A digital identity management system is hosted to communicate with digital identity applications that observe a common application program interface. Each digital identity application implements at least one digital network function for the digital identity.

Apparatus and method for building, extending and managing interactions between digital identities and digital identity applications

A method and/or NFC (Near Field Communication) enabled mobile device is provided for executing an electronic contract on NFC enabled mobile devices. The (NFC) enabled mobile device applies an electronic signature thereof in an electronic contract provided on the NFC enabled mobile device used by a first contracting party, where the electronic signature is applied through a secure element of the NFC enabled mobile device. The NFC enabled mobile device determines that the NFC enabled mobile device is not within NFC range to an other NFC enabled mobile device used by a second contracting party to the electronic contract. In response to the NFC enabled mobile device determining that it is not within NFC range to the other NFC enabled mobile device, the NFC enabled mobile device sends, to the other NFC enabled mobile device, a multimedia messaging service (MMS) text message that includes the electronic contract.

Growing community of inventors

Bardon, Australia

Paul Anthony Ashley