Patent ID: 7802293

Claim:
A method to securely and selectively share digital credentials among a plurality of separate entities including at least a first entity and a second entity, comprising: providing a first credential store, said first credential store including a computer readable storage medium having retrievably stored therein a plurality of first entity credentials; protecting at least a portion of said first entity credentials with first protection means configured to revocably allow said at least a portion of said first entity credentials to be revocably shared with at least the second entity, said first protection means comprising a first secret determinable by at least said second entity; generating said first secret as a function of at least: i. a common secret between said first entity and said at least said second entity, and ii. a first entity specific string retrievable by said at least said second entity; and responsive to at least said first secret, granting said at least a second entity permission to share said at least a portion of said first entity credentials, wherein the second entity is provided with access rights of the first entity corresponding to the first entity credentials that are shared with the second entity.