Patent ID: 8601260

Claim:
A method comprising: receiving a request from a reliant party computer for a digital certificate chain over a network connection, wherein the request comprises a unique identifier from a portable consumer payment device of a user; retrieving, from at least one user-allotted memory segment of a digital certificate library, a digital certificate chain created from the digital certificate, wherein the digital certificate library stores a plurality of the digital certificate chains of other users, and the digital certificate library comprises: a plurality of user-allocated memory segments, wherein the at least one user-allotted memory segment from the plurality of user-allocated memory segments is accessible by the unique identifier from the portable consumer payment device of the user; a plurality of digital certificate chains issued to the user stored at the at least one user-allocated memory segment and wherein at least one digital certificate chain is issued to the user by a registration authority, a registration authority identifier associated with the at least one digital certificate chain that identifies the registration authority on whose behalf the digital certificate is provided in the computer server; a user first cryptographic key included in the at least one digital certificate chain, the user first cryptographic key having a corresponding user second cryptographic key being stored in the portable consumer payment device of the user; a set of user attributes included in the at least one digital certificate chain providing information regarding the relationship between the user and the issuer associated with the digital certificate chain; and a trusted root certificate for the at least one digital certificate chain, with the corresponding trusted root differing from other trusted certificate roots stored at the corresponding user-allocated memory segment; and transmitting, the digital certificate chain over the network to the reliant party computer.