International Business Machines Corporation

Green Market Square Limited

William F Abt, Jr

Daniel A Gisolfi

Richard J Redpath

Asher C Johnson

Robert W Harris, Jr

Peter J Parente

Frank Andre Schaffa

Bryce Allen Curtis

Peter Hans Westerink

Aaron Keith Reed

Brian P Burns

A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Deterministic verification of digital identity documents

A method, system and computer program product for delivering a digital identity document. A request is received to purchase a digital identity document from a user by a system. An acquisition uniform resource locator (URL) with parameters corresponding to the identity of the user and the requested digital identity document is created and provided to the user. The user utilizes the received URL to communicate with an issuer to request the digital identity document. The system then receives the requested digital identity document in encrypted form from the issuer. The system then delivers the encrypted digital identity document to the user. In this manner, the system can deliver to the user an identity document in digital form that has been vetted as trusted in a secure manner thereby reducing the number of occurrences in providing improper identity documents as well as lessening the ability to generate falsified identity documents.

Delivering digital identity documents that are vetted as trusted in a secured manner

A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Privacy control using unique identifiers associated with sensitive data elements of a group

The method utilizes a passport identification number as an element of a homomorphic encryption used to stamp a passport with country entry/exit data to form a digital representation of a subset of information in the passport. As a result, exchange of the digital representation is permitted to allow a selective transfer of information without exposing a user-sensitive passport identification number. The homomorphic encryption comprises a support for exposing a trusted photo and a trusted group containing country travel entry and exit information. The digitally signed passport stamp may then be used to provide verification of the individual by ensuring linkage to that user's passport. The individual's identity and passport verification may occur unconnected, i.e., without having to connect to a central database.

Digital passport country entry stamp

A method, system and computer program product for facilitating the generating of digital identity documents. A system receives a selection and initialization of properties (e.g., identity attributes, document type, alternate views, an acquisition uniform resource locator (URL)) to be used in a digital identity document (e.g., driver's license). The system then builds a template using the selected properties. The system may then present a list of built templates to a user/verifier to be used in generating a corresponding digital identity document. Upon receiving the selected template, the system provides the acquisition URL associated with the selected template to the user/verifier to be used by the user/verifier to request the corresponding digital identity document from the issuer. After receiving the digital identity document constructed by the issuer from the issuer, the system delivers the received digital identity document to the user/verifier.

Construction of digital identity documents in a manner that allows the user to select which attributes are to be revealed

Sensitive pieces of information stored on an individual's device can be protected using a device identification system that applies, for each sensitive piece of information, a function that integrates an identifier of the individual with a respective sensitive piece of information to create a respective identity element. Each identity element can be signed with a signature to create a trust group. The identity element and signature can be uploaded to the individual's device using an application that is configured to provide a subset of the sensitive pieces of information in response to a query.

Secure access for sensitive digital information

A system and method for recording a collaborative session includes two phases. One is performed in real-time and includes determining portions of a composite image of collaborative session content that are constant over time or preprocessed. The portions are removed from the composite image of the collaborative session content. Remaining content of the composite image and any of the portions not already compressed is compressed and stored. A second phase is performed when off-line and includes decoding the remaining content of the composite image and the portions to reconstruct the composite image of the collaborative session content and formatting the composite image.

Growing community of inventors

Nashua, NH, United States of America

William F Abt, Jr