The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Nov. 01, 2011
Filed:
Nov. 17, 2009
John P. Shewchuk, Redmond, WA (US);
Arun K. Nanda, Sammamish, WA (US);
Donald F. Box, Bellevue, WA (US);
Douglas A. Walter, Issaquah, WA (US);
Hervey O. Wilson, Bellevue, WA (US);
John P. Shewchuk, Redmond, WA (US);
Arun K. Nanda, Sammamish, WA (US);
Donald F. Box, Bellevue, WA (US);
Douglas A. Walter, Issaquah, WA (US);
Hervey O. Wilson, Bellevue, WA (US);
Microsoft Corporation, Redmond, WA (US);
Abstract
A cryptographic session key is utilized to maintain security of a digital identity. The session key is valid only for a limited period of time. Additional security is provided via a bimodal credential allowing different levels of access to the digital identify. An identity token contains pertinent information associated with the digital identity. The identity token is encrypted utilizing public-key cryptography. An identifier utilized to verify the validity of the digital identity is encrypted with the cryptographic session key. The encrypted identity token and the encrypted identifier are provided to a service for example. The service decrypts the encrypted identity token utilizing public key cryptography, and decrypts, with the cryptographic session key obtained from the identity token, the encrypted identifier. If the identifier is determined to be valid, the transaction proceeds normally. If the identifier is determined to be invalid, the transaction is halted.