Methods and systems for secure and reliable identity-based computing
The embodiments herein provide a secure computing resource set identification, evaluation, and management arrangement, employing in various embodiments some or all of the following highly reliable identity related means to establish, register, publish and securely employ user computing arrangement resources in satisfaction of user set target contextual purposes. Systems and methods may include, as applicable, software and hardware implementations for Identity Firewalls; Awareness Managers; Contextual Purpose Firewall Frameworks for situationally germane resource usage related security, provisioning, isolation, constraining, and operational management; liveness biometric, and assiduous environmental, evaluation and authentication techniques; Repute systems and methods assertion and fact ecosphere; standardized and interoperable contextual purpose related expression systems and methods; purpose related computing arrangement resource and related information management systems and methods, including situational contextual identity management systems and methods; and/or the like.
1. A secure, tamper resistant identity system for device and device corresponding stakeholder assiduous identification and authentication, such system comprising:
one or more computing arrangements, including at least one processor, for use in providing one or more standardized at least one of resources and specifications, that at least in part enable forming and validating device stakeholder biometric, and device, bound identifying attribute information sets,
wherein such one or more computing arrangements are employed to provide such one or more standardized at least one of resources and specifications, that at least in part, enable using a secure identity information processing and memory arrangement, producing device unique one or more identifier attribute information sets, wherein such identifier attribute information sets include one or more device identifier attributes that are securely at least one of embedded in, otherwise incorporated in, and otherwise securely bound to, their respective device resource corresponding information sets, such at least one of embedded in, otherwise incorporated in, and otherwise securely bound to, attribute information sets including respective devices' at least one of one or more private keys for respective digital certificates, and symmetric keys,
wherein such digital certificates are signed by, and/or symmetric keys are enabled by, their devices' respective manufacturers, and
wherein each device identifier attribute information set includes commercial value chain device corresponding stakeholder at least one of creator, manufacturer, distributor, retailer, and installer, identity information,
wherein such one or more computing arrangements are employed to provide such one or more standardized at least one of resources and specifications, that at least in part, enable using a human biometric identification arrangement comprising, at least in part, at least one of secure electromagnetic and ultrasound, sensor set for biometric identification of device stakeholder identity information sets,
wherein device stakeholders comprise at least one of one or more manufacturers, providers, distributors, retailers, installers, and at least one of users and owners, wherein at least one of stakeholder biometric attribute information sets and information sets respectively derived therefrom, are at least one of securely included in, and securely associated with, respective, corresponding device information sets to form device stakeholder biometric, and device, bound identifying attribute information sets, and
wherein such one or more computing arrangements are employed to provide such one or more standardized at least one of resources and specifications, that at least in part, enable device validation, employing an at least in part hardware tamper resistant processing and memory arrangement, in support of validating such stakeholder biometric, and device, bound identifying attribute information sets, and wherein a determination as to whether to use one or more devices is based, at least in part, on validating the authenticity of device respective at least one of such stakeholder biometric attribute information sets, and such bound identifying attribute information sets.
2. A system as in claim 1 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, securely registering, respective devices' such bound identifying attribute information sets as device and stakeholder resource identifying information sets with at least one of a cloud service and network service, arrangement.
3. A system as in claim 2 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, securely storing for each such respective device, at least a portion of such resource identifying information set, within such device and at an at least one of cloud service and network service, arrangement, as at least a portion of a device identity information set.
4. A system as in any one of claims 1 , 2 , and 3 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, use of devices based, at least in part, by respectively validating at least one of such stakeholder biometric, and device, bound identifying attribute information sets and stakeholder identifying biometric attribute information sets, through secure communication with such at least one of a cloud service and a network service, arrangement.
5. A system as in any one of claims 1 , 2 , and 3 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, such biometric identification arrangement to employ an at least in part hardware tamper resistant pseudo random generator arrangement to produce unpredictable biometric identification arrangement emitter emissions.
6. A system as in any one of claims 1 , 2 , and 3 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, a secret set to be shared by
each at least one of Identity Firewall and Awareness Manager, arrangement, such at least one arrangement including at least one of a sensor set and an emitter and sensor set, and
at least one of a cloud service and an administrative, arrangement.
7. A system as in claim 1 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement, including at least one processor and at least one emitter, each biometric identification emitter and sensor arrangement to employ a shared secret, wherein such secret is protected by a hardened environment, wherein such secret is employed, at least in part, in securely communicating at least one of emitter instructions and emitter updates.
8. A system as in any one of claims 1 , 2 , 3 , and 7 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, such secure, tamper resistant identity system to include at least one of an Identity Firewall and Awareness Manager, arrangement, wherein each such at least one of an Identity Firewall and Awareness Manager, arrangement has a uniquely identifying secret set.
9. A system as in claim 8 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor and at least one emitter, each such at least one of an Identity Firewall and Awareness Manager, arrangement to have an at least in part algorithmic processing arrangement for producing respective emitter and sensor set human biometric identification arrangements' emitter pseudo random emissions.
10. A system as in claim 9 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, at least a portion of processes for each such at least one of an Identity Firewall and Awareness Manager, arrangement to employ: information encryption capabilities, and misdirection and/or obfuscation capabilities.
11. A system as in claim 8 , wherein providing such one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, at least a portion of processes for each such at least one of an Identity Firewall and Awareness Manager, arrangement to employ: information encryption capabilities, and misdirection and/or obfuscation capabilities.
12. A method for establishing a secure, tamper resistant identity system for device and device corresponding stakeholder assiduous identification and authentication, such method comprising:
providing, through use of one or more computing arrangements, including at least one processor, one or more standardized at least one of resources and specifications, that at least in part enable forming and validating device stakeholder biometric, and device, bound identifying attribute information sets,
wherein such providing one or more standardized at least one of resources and specifications, at least in part, enables using a secure identity information processing and memory arrangement, producing device unique one or more identifier attribute information sets, wherein such identifier attribute information sets include one or more device identifier attributes that are securely at least one of embedded in, otherwise incorporated in, and otherwise securely bound to, their respective device resource corresponding information sets, such at least one of embedded in, otherwise incorporated in, and otherwise securely bound to, attribute information sets including respective devices' at least one of one or more private keys for respective digital certificates, and symmetric keys, wherein such digital certificates are signed by, and/or symmetric keys are enabled by, their devices' respective manufacturers, and wherein each device identifier attribute information set includes commercial value chain device corresponding stakeholder at least one of creator, manufacturer, distributor, retailer, and installer, identity information,
wherein such providing one or more standardized at least one of resources and specifications, at least in part, enables using a human biometric identification arrangement comprising, at least in part, at least one of secure electromagnetic and ultrasound, sensor set for biometric identification of device stakeholder identity information sets,
wherein device stakeholders comprise at least one of one or more manufacturers, providers, distributors, retailers, installers, and at least one of users and owners, wherein at least one of stakeholder biometric attribute information sets and information sets respectively derived therefrom, are at least one of securely included in, and securely associated with, respective, corresponding device information sets to form device stakeholder biometric, and device, bound identifying attribute information sets, and
wherein such providing one or more standardized at least one of resources and specifications, at least in part, enables device validation, employing an at least in part hardware tamper resistant processing and memory arrangement, in support of validating such stakeholder biometric, and device, bound identifying attribute information sets, and wherein a determination as to whether to use one or more devices is based, at least in part, on validating the authenticity of device respective at least one of such stakeholder biometric attribute information sets, and such bound identifying attribute information sets.
13. A method as in claim 12 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, securely registering, respective devices' such bound identifying attribute information sets as device and stakeholder resource identifying information sets with at least one of a cloud service and network service, arrangement.
14. A method as in claim 13 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, securely storing for each such respective device, at least a portion of such resource identifying information set, within such device and at an at least one of cloud service and network service, arrangement, as at least a portion of a device identity information set.
15. A method as in any one of claims 12 , 13 , and 14 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, use of devices based, at least in part, by respectively validating at least one of such stakeholder biometric, and device, bound identifying attribute information sets and stakeholder identifying biometric attribute information sets, through secure communication with such at least one of a cloud service and a network service, arrangement.
16. A method as in any one of claims 12 , 13 , and 14 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, such biometric identification arrangement to employ an at least in part hardware tamper resistant pseudo random generator arrangement to produce unpredictable biometric identification arrangement emitter emissions.
17. A method as in any one of claims 12 , 13 , and 14 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, a secret set to be shared by
each at least one of Identity Firewall and Awareness Manager, arrangement, such at least one arrangement including at least one of a sensor set and an emitter and sensor set, and
at least one of a cloud service and an administrative, arrangement.
18. A method as in claim 12 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor and at least one emitter, each biometric identification emitter and sensor arrangement to employ a shared secret, wherein such secret is protected by a hardened environment, wherein such secret is employed, at least in part, in securely communicating at least one of emitter instructions and emitter updates.
19. A method as in any one of claims 12 , 13 , 14 , and 18 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, such secure, tamper resistant identity system to include at least one of an Identity Firewall and Awareness Manager, arrangement, wherein each such at least one of an Identity Firewall and Awareness Manager, arrangement has a uniquely identifying secret set.
20. A method as in claim 19 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor and at least one emitter, each such at least one of an Identity Firewall and Awareness Manager, arrangement to have an at least in part algorithmic processing arrangement for producing respective emitter and sensor set human biometric identification arrangements' emitter pseudo random emissions.
21. A method as in claim 20 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, at least a portion of processes for each such at least one of an Identity Firewall and Awareness Manager, arrangement to employ: information encryption capabilities, and misdirection and/or obfuscation capabilities.
22. A method as in claim 19 , wherein such providing one or more standardized at least one of resources and specifications, enables at least in part, with a computing arrangement including at least one processor, at least a portion of processes for each such at least one of an Identity Firewall and Awareness Manager, arrangement to employ: information encryption capabilities, and misdirection and/or obfuscation capabilities.