Patent ID: 8683209

Claim:
A method for pseudonym generation in a Personal Identity Manager (PIM), the method comprising: with a computer hardware processor, determining a set of public parameters {g,g ∂ ,G 1 ,G 2 ,ê,H 2 ,p} in which: G 1 and G 2 are two selected groups of order q modulo p, in which q is a prime number; ê is a bilinear map and ê:G 1 ×G 1 →G 2 , g is a random generator selected from the group G 1 , H 2 is a one-way hash function and H 2 :G 2 →{0,1}*, and H 1 :{0,1}*→G 1 ; with the computer hardware processor, receiving a user identity ID user from a user device; with the computer hardware processor, generating a prime pseudonym P prime =<H 1 (ID user ),H 1 ∂ (ID user )> based on the determined set of private parameters and the ID user , in which H 1 is a one-way hash function, ∂ is a random number selected from a domain Z p , and p is a selected prime number; with the computer hardware processor, transmitting the prime pseudonym P prime and the set of public parameters to the user device; with the computer hardware processor, receiving a sub-pseudonym P pseu =<Q A ,Q B ,c A > from a third-party device; with the computer hardware processor, calculating a query parameter Ver=ê(g ∂ ,Q A )c A with the sub-pseudonym P pseu and the set of public parameters; with the computer hardware processor, searching for a user identity ID′ user in stored user identities based on the query parameter V er such that ê(Q B ,H ∂ (ID′ user ))=Ver; with the computer hardware processor, transmitting the ID′ user to the third-party device as a user identity corresponding to the P pseu .