Method for digital identity authentication
In a preferred embodiment of the invention, an authenticating device ( 22 ) receives a first digital identity ( 43 ) and a second digital identity ( 63 ). The authenticating device ( 22 ) uses the second digital identity ( 63 ) as a key to a Identity Association Database ( 24 ) to retrieve a database entry ( 33 ). If the database entry ( 33 ) shows an association between the first digital identity ( 43 ) and the second digital identity ( 63 ), the digital identities are valid and an indication ( 72 ) of the validation of existence of association between first digital identity and second digital identity ( 96 ) is made by the authenticating device ( 22 ).
1. The method comprising the steps of:
receiving a first digital identity ( 43 ) using an authenticating device ( 22 );
receiving a second digital identity ( 63 );
retrieving a database entry ( 33 ) using said second digital identity ( 63 ) as a lookup key;
authenticating said second digital identity ( 63 ) by the existence of an association with said first digital identity ( 43 ) in said database entry ( 33 ); and
indicating the result ( 72 ) of said authentication on said authenticating device ( 22 ); and
said first digital identity ( 43 ) is a TAC Identity ( 45 ).
2. The method comprising the steps of:
receiving a first digital identity ( 43 ) using an authenticating device ( 22 );
receiving a second digital identity ( 63 );
retrieving a database entry ( 33 ) using said second digital identity ( 63 ) as a lookup key;
authenticating said second digital identity ( 63 ) by the existence of an association with said first digital identity ( 43 ) in said database entry ( 33 ); and
indicating the result ( 72 ) of said authentication on said authenticating device ( 22 ); and
said second digital identity ( 63 ) is a TAC Identity ( 45 ).
3. A method as recited in claim 1 , in which:
The method comprising the steps of:
receiving a first digital identity ( 43 ) using an authenticating device ( 22 );
receiving a second digital identity ( 63 );
retrieving a database entry ( 33 ) using said second digital identity ( 63 ) as a lookup key;
authenticating said second digital identity ( 63 ) by the existence of an association with said first digital identity ( 43 ) in said database entry ( 33 ); and
indicating the result ( 72 ) of said authentication on said authenticating device ( 22 ); and
said first digital identity ( 43 ) is a TAC Identity ( 45 ).
4. The method comprising the steps of:
receiving a first digital identity ( 43 ) using an authenticating device ( 22 );
receiving a second digital identity ( 63 );
retrieving a database entry ( 33 ) using said second digital identity ( 63 ) as a lookup key;
authenticating said second digital identity ( 63 ) by the existence of an association with said first digital identity ( 43 ) in said database entry ( 33 ); and
indicating the result ( 72 ) of said authentication on said authenticating device ( 22 ); and
said second digital identity ( 63 ) is a TAC Identity ( 45 ).
5. The method comprising the steps of:
receiving a first digital identity ( 43 ) using an authenticating device ( 22 );
receiving a second digital identity ( 63 ) and context information ( 95 );
retrieving a first database entry ( 33 ) using said second digital identity ( 63 ) as a lookup key;
retrieving a second database entry ( 34 ) using said context information ( 95 ) as a lookup key;
authenticating said second digital identity ( 63 ) by the existence of an association with said first digital identity ( 43 ) in said first database entry ( 33 ) and by the existence of an association with said first digital identity ( 43 ) in said second database entry ( 34 ); and
indicating the result ( 72 ) of said authentication on said authenticating device ( 22 ).
6. The method as recited in claim 5 , in which:
said first digital identity ( 43 ) is obtained by a public key mechanism.
7. The method as recited in claim 5 , in which:
said first digital identity ( 43 ) is a PKI Certificate ( 65 ).
8. The method as recited in claim 5 , in which:
said first digital identity ( 43 ) is obtained by a symmetric key mechanism.
9. The method as recited in claim 5 , in which:
said first digital identity ( 43 ) is a TAC Identity ( 45 ).
10. The method as recited in claim 5 , in which:
said second digital identity ( 63 ) is obtained by a public key mechanism.
11. The method as recited in claim 5 , in which:
said second digital identity ( 63 ) is a PKI Certificate ( 65 ).
12. The method as recited in claim 5 , in which:
said second digital identity ( 63 ) is obtained by a symmetric key mechanism.
13. The method as recited in claim 5 , in which:
said second digital identity ( 63 ) is a TAC Identity ( 45 ).
14. The method as recited in claim 5 , in which:
said indication of authentication ( 72 ) is temporal.
15. The method as recited in claim 5 , in which:
said context information ( 95 ) includes network layer state information.
16. The method as recited in claim 5 , in which:
said context information ( 95 ) includes transport layer state information.
17. The method as recited in claim 5 , in which:
said context information ( 95 ) includes TCP/IP state information.
18. The method as recited in claim 5 , in which:
said context information ( 95 ) includes application state.
19. The method as recited in claim 5 , in which:
said context information ( 95 ) includes state information from any of the OSI protocol stack layers.
20. The method as recited in claim 5 , in which:
said indication of authentication ( 72 ) includes the invalidation of said first digital identity ( 43 ).