International Business Machines Corporation

Other

Parhelion Incorporated

Richard J Redpath

Daniel A Gisolfi

James Redpath

William F Abt, Jr

Gennaro A Cuomo

Sandeep Kishan Singhal

Binh Q Nguyen

Dennis D King

Steven Michael Miller

Jason Y Blakely

Bryce Allen Curtis

Christopher Joseph Paul

Christopher Hoang Doan

Aaron Keith Reed

Gene Wayne Cherry

Daniel Mark Schumacher

Michael L Fraenkel

David Phillip Johnson

Marshall Allen Lamb

Patrick Gabriel McGowan

Rodney A Smith

Brian Thomas Lillie

Asher C Johnson

Robert Selby Sielken

Pralhad M Khatri

Timothy E Allen

Simon Phipps

Gregory Michael Doudnikoff

Hung D Nguyen

David Michael Oliver

David R Boloker

You B Chen

Daniel Stewart Hamilton

Barry Rodger Beggs, Jr

A method, system and computer program product for delivering a digital identity document. A request is received to purchase a digital identity document from a user by a system. An acquisition uniform resource locator (URL) with parameters corresponding to the identity of the user and the requested digital identity document is created and provided to the user. The user utilizes the received URL to communicate with an issuer to request the digital identity document. The system then receives the requested digital identity document in encrypted form from the issuer. The system then delivers the encrypted digital identity document to the user. In this manner, the system can deliver to the user an identity document in digital form that has been vetted as trusted in a secure manner thereby reducing the number of occurrences in providing improper identity documents as well as lessening the ability to generate falsified identity documents.

Delivering digital identity documents that are vetted as trusted in a secured manner

A master digital copy of a registration is transmitted. The registration is proof that a physical object has been registered with a registration authority. A valid peripheral digital copy of the registration is received. The valid peripheral digital copy of the registration was made from the master digital copy of the registration and is incapable of being used to make other valid digital copies of the registration.

Management of digital copies of registrations using mobile devices

An example operation may include one or more of connecting, by an identity server, to a blockchain configured to store an identity trait of a user, retrieving, by an identity server, the identity trait from the a blockchain, establishing, by the identity server, a trust group homomorphism digital signature algorithm (DSA) for the user associated with the identity trait based on a public key PK, creating, by the identity server, a zero-knowledge proof function with a public key PKbased on a DSA member of the trust group homomorphism for witness data, providing, by the identity server, the witness data to a challenger for the zero-knowledge proof function, and receiving, by the identity server, a validation of the user as a proved user based on execution of the zero-knowledge proof function based on the witness data.

Trusted identity solution using blockchain

A laser light striping method and apparatus suitable for reading smoke and distance navigation during fire rescue. The laser light striping apparatus comprises at least a laser light emitting element and at least one optical element for creating at least one laser light plane. The method provides an optimized Gaussian distribution profile of power across a laser light plane to avail safe navigation by human in a turbid environment such as smoke/fire during fire rescue and limit blinding by light.

Laser light striping apparatus

A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Privacy control using unique identifiers associated with sensitive data elements of a group

An example operation may include one or more of connecting to a blockchain configured to store an identity trait of a user, retrieving the identity trait from the blockchain, establishing a trust group homomorphism digital signature algorithm (DSA) for the user based on a private key, creating a zero knowledge succinct non-interactive argument of knowledge (zkSNARK) proof constructed based on a DSA of a trait in the trust group homomorphism DSA as witness data, and obtaining further trust information related to the user from the witness data.

A first digital identification document is transmitted from an identification authority to a mobile device of an identified individual. This first digital identification document is digitally signed and includes a set of attributes about the identified individual. In the same manner, a second digital identification document is also transmitted to the identified individual's mobile device. The second digital identification document is also digitally signed but includes a different set of attributes about the identified individual. The identified individual is then confronted by a series of challengers, wherein each challenger requires a different amount of information about the identified individual. Based on the identity of each challenger, the identified individual selects an appropriate identification document and transmits it to the applicable challenger's device. The challenger is then able to confirm both the information he needs about the identified individual and the validity of the identification document that he receives.

Using multiple digital identification documents to control information disclosure

An apparatus includes a light emitting diode (LED) chip; a laser light source; a front heat sink including first and second holes; a lens arranged to extend over the first hole; a back heat sink; and an insulating circuit board including a third hole, the circuit board sandwiched between the heat sinks such that the second hole and the third holes are aligned. The LED chip is mounted in a surface of the circuit board facing the front heat sink, and arranged such that it aligns with the first hole and the lens. The laser light source is provided in the back heat sink and arranged such that it extends at least partially through the second and third holes.

Illumination apparatus having thermally isolated heat sinks and dual light sources

Optical mount lighting projection system enclosure

The method utilizes a passport identification number as an element of a homomorphic encryption used to stamp a passport with country entry/exit data to form a digital representation of a subset of information in the passport. As a result, exchange of the digital representation is permitted to allow a selective transfer of information without exposing a user-sensitive passport identification number. The homomorphic encryption comprises a support for exposing a trusted photo and a trusted group containing country travel entry and exit information. The digitally signed passport stamp may then be used to provide verification of the individual by ensuring linkage to that user's passport. The individual's identity and passport verification may occur unconnected, i.e., without having to connect to a central database.

Digital passport country entry stamp

The present invention provides a mechanism for efficiently displaying a web site and its content on a mobile device independent of whether the mobile device is connected or disconnected from the network. When the mobile device requests a server hosting the web site, the server compresses the page elements which compose the web site content. The server transmits the compressed page elements in response to the mobile device's request. The mobile device decompresses the page elements and locally stores the decompressed page elements. The mobile device displays the web site content which is locally stored when a user of the mobile device so requests.

Transport and administration model for offline browsing

Growing community of inventors

Cary, NC, United States of America

Richard J Redpath