Patent ID: 7640579

Claim:
A computer-implemented method for securely roaming a digital identity stored on a secure roaming device, wherein the secure roaming device stores encrypted attributes of the digital identity accessible using a bimodal credential, the method comprising: receiving a request for at least one attribute of the digital identity from a service provider; providing to the secure roaming device a first password of the bimodal credential, wherein the first password enables a safe mode of access to the digital identity; retrieving from the secure roaming device an encrypted identity token, wherein the encrypted identity token is encrypted with a private key of a public-key cryptographic key pair, and wherein the encrypted identity token comprises: a cryptographic session key; a time stamp indicative of a duration of the cryptographic session key; and the at least one attribute of the digital identity, wherein the at least one attribute comprises private identity information; retrieving from the secure roaming device an encrypted identifier, wherein the encrypted identifier is encrypted with the cryptographic session key; and providing the encrypted identity token and the encrypted identifier to the service provider.