Eric K Wingrove

US Patent:

20090119757, May 7, 2009

Filed:

Nov 6, 2007

Appl. No.:

11/935408

Inventors:

Victor A. Acuna - Rochester MN, US
Lee Nee - Rochester MN, US
Omar E. Perez - Cary NC, US
Eric K. Wingrove - Rochester MN, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

G06F 7/04

US Classification:

726 5

Abstract:

A credential repository securely stores user credentials. The credential repository may be accessed by multiple entities. Instead of having a user carry his credentials with him (e.g., on a credit card or driver's license, which can be lost or stolen), the user's credentials are retrieved from the credential repository for use in a transaction. A merchant or other entity requesting the transaction receives these retrieved credentials and uses them to verify the identity of the user who seeks to participate in the transaction. A time-to-live value may be associated with the retrieved credentials. Successful verification of the user's identity enables private or personal data of the user to be released to the merchant or other entity. Optionally, the user explicitly authorizes the release of the data.

US Patent:

20090119756, May 7, 2009

Filed:

Nov 6, 2007

Appl. No.:

11/935407

Inventors:

Victor A. Acuna - Rochester MN, US
Lee Nee - Rochester MN, US
Omar E. Perez - Cary NC, US
Eric K. Wingrove - Rochester MN, US

Assignee:

INTERNATIONAL BUSINESS MACHINES CORPORATION - Armonk NY

International Classification:

H04L 9/32

US Classification:

726 5

Abstract:

A credential repository securely stores user credentials. The credential repository may be accessed by multiple entities. Instead of having a user carry his credentials with him (e.g., on a credit card or driver's license, which can be lost or stolen), the user's credentials are retrieved from the credential repository for use in a transaction. A merchant or other entity requesting the transaction receives these retrieved credentials and uses them to verify the identity of the user who seeks to participate in the transaction. A time-to-live value may be associated with the retrieved credentials. Successful verification of the user's identity enables private or personal data of the user to be released to the merchant or other entity. Optionally, the user explicitly authorizes the release of the data.