Patent ID: 8402526

Claim:
In an environment including a service provider environment, an identity provider environment, a host computing system, a user-portable user computing device comprising user identity information including a plurality of first user identities of a user, the user computing device configured to communicate with the host computing system, and a network connecting the host computing system to the service provider environment and the identity provider environment, a method, comprising: the host computing system initiating an interaction with the service provider environment; the host computing system receiving from the service provider environment identity requirements for a user relating to the interaction; the host computing system determining whether any user identity among at least one of the first user identities of the user satisfies the identity requirements; the host computing system generating a token request with respect to a selective one of any user identity determined to satisfy the identity requirements; the host computing system communicating the token request to the user computing device; the user computing device issuing a security token according to the token request; and the user computing device communicating the security token to the host computing system.