Patent ID: 8468359

Claim:
A machine-implemented method that executes on a machine, comprising: generating, by the machine, a random and unique identifier, the machine maintains an association between the identifier and a target service that the machine is to interact with and the association is only known by and only managed by the machine; blinding, by the machine, the message, the blinding ensures the message is encrypted; sending, by the machine, the blinded message and a copy of the identifier to an identity service, the identity service incapable of decrypting the blinded message and incapable of identifying the association between the identifier and the target service; receiving, by the machine, an assertion and blinded signature for the blinded message from the identity service, wherein the assertion includes the identifier, the assertion for authenticating the machine for access to the resource of the target service, the identity service remains unaware of access between the machine and the target service and remains unaware of an identity for the target service, and the identity service is not involved in the interactions between the machine and the target service and is unaware of the target service, the identity service cannot profile or track activities of the machine and provides service-specific credentialing to the machine for access to the resource via the assertion and this is done without the identity service having knowledge of the identity for the target service that controls the resource; unblinding, by the machine, the blinded message and the blinded signature; and sending, by the machine, the unblinded message, the identifier, the unblinded signature, and the assertion to a target service for access to a resource of the target service.