Patent ID: 7325143

Claim:
A method comprising: generating a user identity from a message digest algorithm that uses as input a user credential associated with a particular user and a user credential identifier identifying a class to which the user credential belongs; generating a service authorization identity from a hashed message authentication coding algorithm that uses as input a service authentication key, a user identity and a service identity; permuting each of the service authorization identity, the user identity and the service identity; and storing the permuted user identity, the permuted service identity and the permuted service authorization identity in a directory; wherein generating the user identity comprises a) generating a first hash value from a message digest algorithm using as input the user credential identifier, b) forming a first linear vector of the user credential identifier and the first hash value, c) generating a second hash value from a message digest algorithm using as input the first linear vector, d) forming a second linear vector of the second hash value and an organization identity, and e) generating the user identity from a message digest algorithm using as input the second linear vector.