Patent ID: 8104074

Claim:
A digital identity system, the digital identity system comprising a first computer, the first computer associated with a principal, the first computer comprising storage media that store computer readable instructions, execution of the computer readable instructions causing the first computer to: store a first digital identity at the first computer, the first digital identity associated with the principal and a first identity provider, the first digital identity comprising a first XML document, the first XML document containing a first claim list, the first claim list specifying claims that the first identity provider is able to provide; store a second digital identity at the first computer, the second digital identity associated with the principal and a second identity provider, the second digital identity comprising a second XML document, the second XML document containing a second claim list, the second claim list specifying claims that the second identity provider is able to provide; after storing the first digital identity and the second digital identity at the first computer, send a request to a relying party; receive a security policy from the relying party in response to the request, the security policy comprising a third XML document, the third XML document specifying a security token type required by the relying party and specifying required claims; in response to receiving the security policy, automatically determine, based on a review of the claims specified by the first claim list and the second claim list, that the first claim list specifies each of the required claims; after determining that the first claim list specifies each of the required claims, send a first token request to the first identity provider, the first token request requesting a first security token, the first token request indicating one or more of the required claims specified by the security policy; receive the first security token from the first identity provider, the first security token including a third claim list, the third claim list including the one or more required claims specified by the security policy, the first security token being of the security token type specified by the security policy; and forward the security token to the relying party.