Patent ID: 8549589

Claim:
An apparatus, comprising: a memory configured to store a credential-owner authentication information associated with an identity of an individual, the memory being configured to store an issuer validation information associated with an issuer of a credential; and a module configured to transmit to a first terminal device outside a first domain the credential-owner authentication information and the issuer validation information such that (1) the identity of the individual is authenticated at a database outside the first domain and a second domain based on the credential-owner authentication information and the issuer validation information, and (2) a first set of privileges associated with the first domain is determined, at the first domain, based on the identity, the module configured to transmit to a second terminal device outside the second domain the credential-owner authentication information and the issuer validation information such that (1) the identity of the individual is authenticated at the database based on the credential-owner authentication information and the issuer validation information, and (2) a second set of privileges different than the first set of privileges and associated with the second domain is determined, at the second domain, based on the identity, the second domain being different than the first domain.