Patent ID: 8095969

Claim:
A method for creating a security token having independently-revocable assertions, the method comprising: generating a first assertion with an associated first assertion identifier; generating a second assertion with an associated second assertion identifier, wherein the second assertion is independently-revocable with respect to the first assertion; combining, at a computing device, the first assertion and the second assertion into the security token and digitally signing the security token comprising multiple independently-revocable assertions; ascertaining, at the computing device, whether a plurality of conditional revocation assertions are valid; in response to ascertaining that one or more conditional revocation assertions are valid, including a corresponding assertion identifier from each of the one or more valid conditional revocation assertions in a set of revoked assertion identifiers; rejecting the first assertion when the first assertion identifier matches a revoked assertion identifier in the set of revoked assertion identifier; and applying the second assertion to an evaluation algorithm when the second assertion identifier does not match any revoked assertion identifier in the set of revoked assertion identifiers.