IP Library › Granted Patent US 10,509,672

Granted Patent B2

US 10,509,672 · App. 15/674,429 · Granted Dec 17, 2019

Systems and methods enabling a resource assertion environment for evaluating the appropriateness of computer resources for user purposes

Inventors: Victor Henry Shear (Atherton, CA); Peter Robert Williams (Belmont, CA); Jaisook Rho (Palo Alto, CA); Timothy St. John Redmond (San Francisco, CA); James Jay Horning (Palo Alto, CA)

Assignee: Advanced Elemental Technologies, Inc.

G06F9/50 G06F9/5072 G06F9/5083 G06F16/245 G06F16/248 G06F16/24575 G06F16/285 G06F17/20 G06Q10/0631 H04L47/70 G06F16/9535 G06F21/31 G06F2221/2141 G06Q50/01 H04L63/10 H04L63/101 H04L63/20

View Patent ↗

Loading inventors, assignments & file history…

Monitor This Case

Get email alerts when status or documents change.

Order Certified Copies

Most orders are placed with the USPTO same day — all within 24 business hours.

Order via The Patent Place →

Pre-filled with this patent's details

Quick Facts

Patent No.: US 10,509,672
App. No.: 15/674,429
Granted: Dec 17, 2019
Kind: B2

External Links

USPTO Patent Center↗ Full Patent PDF↗

Abstract

A system, method, and computer-readable storage medium configured to facilitate user purpose in a computing architecture.

Claims (86)

1. A system for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set stakeholders, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users' corresponding purposes, such system comprising:

a computing processor and memory arrangement for providing at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable:

operating an at least in part standardized, interoperable, and secure resource identification and descriptive assertion information environment, wherein standardization at least in part ensures computer resource structured identification and assertion information set interoperability,

wherein such structured identification and assertion information sets are published by such sets' respective stakeholders for subsequent use by computing arrangement end-users, and wherein each such published information set comprises securely specified and associated resource identification and assertion information components, wherein each such published information set comprises at least in part:

a. an identification and assertion information set suitability to purpose component, wherein such information set component comprises, at least in part, (i) a purpose expression and (ii) an associated suitability to expressed purpose value expressed in a standardized form,

b. a subject matter resource identifier component,

c. an identification and assertion information set stakeholder person's identifying information component, acquired at least in part through use of at least one at least in part biometric hardware sensor arrangement,

d. at least one attribute information component descriptive of such stakeholder person, such attribute information component comprising a securely governed, non-biometric, stakeholder characterizing, verifiable fact information set for subsequent use by identification and assertion information set end-users, and

e. at least one validation rule set component for end-user verification of such non-biometric fact information set of such stakeholder person, such verification performed using at least one hardware tamper resistant processing and memory arrangement for secure validation rule set fact testing;

wherein such structured identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such stakeholders, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

wherein computing arrangement end-users use such identification and assertion information sets at least in part to respectively evaluate the suitability of one or more candidate computer resources for respective such end-users' purposes.

2. A system as in claim 1 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such specifying stakeholder of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

3. A system as in claim 1 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set associated suitability to expressed purpose value to comprise a value representing an aggregation of suitability to expressed purpose values for assertions respectively asserted by plural independent parties wherein such assertions' information sets employ the same purpose expression and subject matter identifier component.

4. A system as in claim 1 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set purpose expression to comprise a contextual purpose expression specification.

5. A system as in claim 1 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to include at least one of (a) a second purpose expression for such subject matter resource, (b) a second suitability to expressed purpose value associated with at least one of such purpose expression and such second purpose expression, and (c) a second subject matter resource identifier.

6. A system as in claim 1 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to include at least one counterpoint identification and assertion information set, such counterpoint identification and assertion information set regarding the same subject matter resource as such identification and assertion information set, wherein such counterpoint identification and assertion information set comprises (a) a purpose expression, (b) an associated suitability to expressed purpose value that is different from the non-counterpoint identification and assertion information set suitability to expressed purpose value, and (c) the same subject matter identifier as such identification and assertion information set.

7. A system for secure reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set asserters, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users' corresponding purposes, such system comprising:

a computing processor and memory arrangement for providing at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable:

wherein such providing enables a computing processor and memory arrangement supporting:

specifying identification and assertion information sets by respective asserters, wherein each such identification and assertion information set specifies at least in part:

i. an assertion regarding a uniquely identified subject matter, using at least one hardware tamper resistant processing and memory arrangement, wherein such subject matter is a resource set,

ii. an environment wide, unique identifier for such identification and assertion information set,

iii. a unique identifier for an assertion asserter of such identification and assertion information set, such identifier, at least in part, based upon biometric identification of such asserter, using at least one at least in part biometric hardware sensor arrangement,

iv. one or more asserted characteristics associated with such assertion asserter, using at least one hardware tamper resistant processing and memory arrangement,

wherein such one or more asserted characteristics are any one or more of asserted attribute types comprising:

a) asserter trustworthiness as associated with one or more purpose expressions,

b) asserter reliability as associated with one or more purpose expressions,

c) asserter affinity group membership, and

d) at least one of one or more professional and expertise credentials of such identified asserter, and

v. at least one validation rule set for validating such one or more asserted characteristics associated with such assertion asserter, wherein:

a) such validating uses at least one test procedure,

b) computing arrangement end-users are independently evaluating respective resources for their respective purposes, and

c) at least a portion of such validating is performed using at least one hardware tamper resistant processing and memory arrangement;

wherein each such identification and assertion information set is uniquely identified through use of a standardized, interoperably interpretable identification schema compliant with such computing arrangement at least one of one or more standardized (a) resources and (b) specifications, and wherein identification information from such uniquely identified identification and assertion information set's unique identifier is interoperably interpretable by plural independent parties;

wherein such identification and assertion information sets are at least in part cryptographically bound to their respective identification and assertion information set subject matter resources and/or resource identifiers;

wherein such identification and assertion information sets specified by such asserters, and used by such end-users, are employed in a distributed purposeful computing environment comprising personal computing arrangements and one or more network service arrangements, wherein such personal computing arrangements and such one or more network service arrangements are configured to support securely specifying and/or using such structured identification and assertion information sets through the use of tamper resistant processing and memory, wherein such secure tamper resistant specifying and/or using enables securely governed identification and assertion information set publishing and usage activities, such activities performed using respective computing arrangements of such distributed purposeful computing environment comprising personal computing, and network service, arrangements; and

8. A system as in claim 7 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables at least one such specifying asserter of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

9. A system as in any one of claims 1 and 7 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables the subject matter identified by such identification and assertion information set to comprise, in part, a resource class.

10. A system as in any one of claims 1 and 7 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables such identification and assertion information set to comprise at least one of: (a) an assertion information set trust level with an associated suitability to expressed purpose value and (b) a reliability level with an associated suitability to expressed purpose value.

11. A system as in any one of claims 1 and 7 , wherein such providing at least one of one or more standardized (a) resources and (b) specifications, at least in part enables a computing arrangement to support specifying plural such identification and assertion information sets, wherein at least one of (a) at least one identification and assertion information set identifies one or more other such identification and assertion information sets as its subject matter, and (b) at least one such identification and assertion information set includes one or more other such assertion information sets.

12. A method for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set stakeholders, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users' corresponding purposes, such method comprising:

providing, through use of a computing processor and memory arrangement, at least one of one or more standardized (a) resources and (b) specifications, to at least in part enable:

a. securely specifying an identification and assertion information set suitability to purpose component, wherein such information set component comprises, at least in part, (i) a purpose expression and (ii) an associated suitability to expressed purpose value expressed in a standardized form,

b. securely specifying a subject matter resource identifier component,

c. identifying and specifying an identification and assertion information set stakeholder person's identifying information component, acquired at least in part through use of at least one at least in part biometric hardware sensor arrangement,

d. specifying at least one non-biometric attribute information component descriptive of such stakeholder person, such attribute information component comprising a securely governed, non-biometric, stakeholder characterizing, verifiable fact information set for subsequent use by identification and assertion information set end-users, and

e. securely specifying at least one validation rule set component for end-user verification of such non-biometric fact information set of such stakeholder person, such verification performed using at least one hardware tamper resistant processing and memory arrangement for secure validation rule set fact testing;

13. A method as in claim 12 , wherein such providing at least in part enables at least one such specifying stakeholder of such identification and assertion information set to be a named organization, and to be represented by the named organization one or more human agents.

14. A method as in claim 12 , wherein such providing at least in part enables such identification and assertion information set associated suitability to expressed purpose value to comprise a value representing an aggregation of suitability to expressed purpose values for assertions respectively asserted by plural independent parties wherein such assertions' information sets employ the same purpose expression and subject matter identifier component.

15. A method as in claim 12 , wherein such providing at least in part enables such identification assertion information set purpose expression to comprise a contextual purpose expression specification.

16. A method as in claim 12 , wherein such providing at least in part enables such identification and assertion information set to include at least one of (a) a second purpose expression for such subject matter resource, (b) a second suitability to expressed purpose value associated with at least one of such purpose expression and such second purpose expression, and (c) a second subject matter resource identifier.

17. A method as in claim 12 , wherein such providing at least in part enables such identification and assertion information set to include at least one counterpoint identification and assertion information set, such counterpoint identification and assertion information set regarding the same subject matter resource as such identification and assertion information set, wherein such counterpoint identification and assertion information set comprises (a) a purpose expression, (b) an associated suitability to expressed purpose value that is different from the non-counterpoint identification and assertion information set suitability to expressed purpose value, and (c) the same subject matter identifier as such identification and assertion information set.

18. A method for secure and reliable publishing of, and subsequent use of, resource characterizing structured identification and assertion information sets, such structured identification and assertion information sets securely (a) specified and published by respective subject matter identification and assertion information set asserters, and (b) subsequently respectively used by computing arrangement end-users in determination of the suitability of using respective computer resources in fulfillment of such end-users' corresponding purposes, such method comprising: