Patent ID: 8667269
Filing Date: 2014-03-04
Classification: H04L

Abstract:
1. A computerized method of providing a cryptographic identity service to an individual, the method comprising: receiving from the individual over a network, at a server system, an electronic message containing a request for the cryptographic identity service, the request including a surrogate certificate identifier specific to the individual, the surrogate certificate identifier identifying a specific surrogate certificate having encryption data, the surrogate certificate identifier having been constructed by applying a one-way hash function to data, accessible only by the individual, that is associated with the specific surrogate certificate; retrieving the specific surrogate certificate, from a storage arrangement that is part of the server system, using the received surrogate certificate identifier specific to the individual, wherein the storage arrangement stores, without retrievabilty thereof by any user, a set of surrogate certificates that are indexed by surrogate certificate identifiers; and performing the requested identity service in a computer process using the encryption data in the retrieved surrogate certificate, wherein the server system is configured to preclude performing any identity service unless pursuant to a request including a surrogate certificate identifier pertinent thereto.