Patent ID: 7788499

Claim:
A computer system associated with a claims authority that provides digital identities, the computer system comprising: one or more computer-readable media storing computer-executable instructions; and one or more processor units that execute the computer-executable instructions, the computer-executable instructions, when executed by the one or more processor units, cause the computer system to: receive a security policy of a relying party from a principal; generate a computational token, the computational token including one or more claims required by the security policy, the one or more claims associated with an identity of the principal, wherein the claims in the computational token are encrypted such that the relying party is able to decrypt the claims, the relying party being a party relying on the claims, wherein the claims in the computational token are in an encrypted format understandable by the relying party and not formatted for review by the principal; generate a display token, the display token including display information about information stated by the claims in the computational token, wherein the display information is configured to allow the principal to view the display token, the display information comprising a language identifier that indicates how content of the display token is localized, the display token comprising the following for each of the claims: a unique identifier of the claim, a display tag that provides a friendly name for the claim, a description element that provides a description of semantics of the claim, and a display value element that provides one or more displayable values for the claim; generate a security token that includes the computational token, the display token, and a digital signature over the computational token and the display token, the digital signature usable by the relying party to cryptographically verify that the security token originated from the claims authority; and send the security token to a computer system associated with the principal.