Patent ID: 9049027
Filing Date: 2015-06-02
Classification: H04L

Abstract:
1. A method for generating a cryptographically secure digital signature via a processing system of an identity service, the processing system including at least one processor, the cryptographically secure digital signature being associated with a user or a user account of a remote computing resource, the method comprising: receiving, via a receiver of the identity service, an explicit cryptographic binding from the remote computing resource, the explicit cryptographic binding based on binding an authentic digital identity of the user or the user account to the document or information; receiving the authentic digital identity; authenticating the user or a user account as a client to an identity service; requesting, via the processing system, authentication of the Identity Service to act as an authentic identity service for the generation of the cryptographically secure digital signature from an authorization service; obtaining a digital witness certification in accordance with the identity service being authorized to act as an identity service, the obtained digital witness certification being based on the explicit cryptographic binding; producing, via the processing system, a digital signature by combining the digital witness certification, the explicit cryptographic binding, and the authentic digital identity; and sending the produced digital signature back to the remote computing resource, the authentication of the user or the user account as the client of the identity service is based on the authentic digital identity, the authorization service is a secure time-stamp service, the digital witness certification is obtained from the secure time-stamp service, the digital witness certification includes a secure time-stamp certification, and the produced digital signature is classified as a Signed by User Associated with Authenticated Digital Identity certification.