Granted Patent B2

US 12,603,780 · App. 18/782,801 · Granted Apr 14, 2026

Inventors: Amod Ashok Dange (Mountain View, CA); Yash Mody (Mumbai, IN)

Assignee: Amod Ashok Dange

H04L9/3213H04L9/0866H04L9/0869H04L9/30H04L9/3231H04L9/3247H04L63/0861G06F21/32H04L63/0281H04L63/0823H04L63/102

Abstract

Claims (123)

1 . A System for managing an Operating System using tokenized identity, the system comprising:

a processor and a memory coupled to the processor, wherein the processor is configured to execute instructions stored in the memory for:

a) maintaining a token repository, wherein the token repository is configured to maintain a user token, a Unique-Number, and a Public-Key corresponding to each user from a set of users;

b) registering a user by,

receiving a set of biometric samples of the user corresponding to one or more biometric factors,

processing the set of biometric samples to compute a Secret-Key (S 1 ) corresponding to the user,

generating a Unique-Number (N 1 ) using a random number generation algorithm,

applying a Function (F 1 ) to the Secret-Key (S 1 ) and the Unique-Number (N 1 ) to compute a Public-Key (P 1 ),

storing the Unique-Number (N 1 ) on a provisioned virtual remote device and in a token repository, wherein the provisioned virtual remote device is a virtual machine corresponding to the user, wherein the provisioned virtual remote device is hosted over a remote server, wherein the token repository is hosted over a centralized server and

storing the Public-Key (P 1 ) in the token repository, on the provisioned virtual remote device, and on a thin client application on a personal local device,

receiving a user input on the thin client application corresponding to one or more immutable attributes of the user,

generating an immutable attribute token for each immutable attribute, and

storing the immutable attribute tokens along with the Public-Key (P 1 ) in the token repository;

c) transmitting to a user, a session signing request from a proxy-user management application, wherein the proxy-user management application is integrated with a device Operating System (OS), wherein the session signing request corresponds to a user-authenticated session, on the device Operating System (OS), wherein the session signing request is received via a thin client session running on a client device;

d) initiating a first authentication process for authenticating the user via the thin client session by,

receiving a biometric sample captured from the user in real-time,

processing the biometric sample to generate a Secret-Key (S 2 ),

when using a thin client application on a personal local device,

selecting the Public-Key (P 1 ) from the thin client application,

fetching the corresponding Public-Key (P 1 ) from the token repository,

computing a Real-Time-Unique-Number (N 2 ) using the Public-Key (P 1 ), the Secret-Key (S 2 ) and the Function (F 1 ), and

authenticating the user based on comparison of the Real-Time-Unique-Number (N 2 ) with the Unique-Number (N 1 ) stored in the token repository,

when using a thin client application on a non-personal local device,

receiving a user input corresponding to the one or more immutable attributes of the user,

generating a token corresponding to each of the one or more immutable attributes,

querying the token repository for one or more tokens,

fetching the public-keys (P 1 -Pn) corresponding to the one or more tokens,

computing a Real-Time-Unique-Number (N 2 ) for each Public-Key (P 1 -Pn), the Secret-Key (S 2 ) and the Function (F 1 ), identifying a target Real-Time-Unique-Number (N 2 t ),

wherein the target Real-Time-Unique-Number (N 2 t ) matches the Unique-Number (N 1 ) stored in the token repository, and

authenticating the user based on comparison of the target Real-Time-Unique-Numbers (N 2 t ) with the Unique-Number (N 1 ) stored in the token repository;

e) fetching from the token repository, a user token (T 1 ) corresponding to the Unique-Number (N 1 );

f) Identifying from a set of proxy-user management application instances, a proxy-user management application instance corresponding to the user token (T 1 );

g) displaying a request to sign the proxy-user management application session and the corresponding device OS session;

h) capturing the user's approval to affix the user's biometrically authenticated signature to the session;

i) initiating a second authentication process; and

j) recording the user's biometrically authenticated signature in the proxy-user management application session log.

2 . The system of claim 1 , wherein the proxy-user management application is a device operating system, wherein the device operating system corresponds to a computer OS, an Artificial Intelligence (AI) Agent OS, or a Robot OS,

wherein the user is logged into computer, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the computer operation session,

wherein the AI Agent represents the user when interacting with others, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the AI Agent operation session, and

wherein the Robot represents the user, when interacting with others, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the Robot operation session.

3 . The system of claim 1 , wherein the session signing request is triggered by the proxy-user management application session based on a set of predefined rules.

4 . The system of claim 1 , wherein the session signing request is generated upon receiving a user command to launch the proxy-user management application session.

5 . The system of claim 4 , wherein the proxy-user management application session is configured to record the user's biometrically authenticated signature, wherein the user's biometrically authenticated signature represents a promise to abide by the terms and conditions specified in respect of the proxy-user management application session.

6 . The system of claim 1 , wherein the second authentication process is triggered upon capturing the user's approval through the user interface, wherein the second authentication process is the same as the first authentication process.

7 . The system of claim 1 , wherein when the user is accessing the system via a thin client on the user's personal device, fetching the Public-Key (P 1 ) corresponding to the user from the token repository.

8 . A method for managing an Operating System using tokenized identity, the method comprising steps of:

a) maintaining a token repository, wherein the token repository is configured to maintain a user token, a Unique-Number, and a Public-Key corresponding to each user from a set of users;

b) registering a user by,

receiving a set of biometric samples of the user corresponding to one or more biometric factors,

processing the set of biometric samples to compute a Secret-Key (S 1 ) corresponding to the user,

generating a Unique-Number (N 1 ) using a random number generation algorithm,

applying a Function (F 1 ) to the Secret-Key (S 1 ) and the Unique-Number (N 1 ) to compute a Public-Key (P 1 ),

storing the Unique-Number (N 1 ) on a provisioned virtual remote device and in a token repository, wherein the provisioned virtual remote device is a virtual machine corresponding to the user, wherein the provisioned virtual remote device is hosted over a remote server, wherein the token repository is hosted over a centralized server and

storing the Public-Key (P 1 ) in the token repository, on the provisioned virtual remote device, and on a thin client application on a personal local device,

receiving a user input on the thin client application corresponding to one or more immutable attributes of the user,

generating an immutable attribute token for each immutable attribute, and

storing the immutable attribute tokens along with the Public-Key (P 1 ) in the token repository;

c) transmitting to a user, a session signing request from a proxy-user management application, wherein the proxy-user management application is integrated with a device Operating System (OS), wherein the session signing request corresponds to a user-authenticated session, on the device Operating System (OS), wherein the session signing request is received via a thin client session running on a client device;

d) initiating a first authentication process for authenticating the user via the thin client session by,

receiving a biometric sample captured from the user in real-time,

processing the biometric sample to generate a Secret-Key (S 2 ),

when using a thin client application on a personal local device,

selecting the Public-Key (P 1 ) from the thin client application,

fetching the corresponding Public-Key (P 1 ) from the token repository,

computing a Real-Time-Unique-Number (N 2 ) using the Public-Key (P 1 ), the Secret-Key (S 2 ) and the Function (F 1 ), and

authenticating the user based on comparison of the Real-Time-Unique-Number (N 2 ) with the Unique-Number (N 1 ) stored in the token repository,

when using a thin client application on a non-personal local device,

receiving a user input corresponding to the one or more immutable attributes of the user,

generating a token corresponding to each of the one or more immutable attributes,

querying the token repository for one or more tokens;

fetching the public-keys (P 1 -Pn) corresponding to the one or more tokens,

computing a Real-Time-Unique-Number (N 2 ) for each Public-Key (P 1 -Pn), the Secret-Key (S 2 ) and the Function (F 1 ),

identifying a target Real-Time-Unique-Number (N 2 t ), wherein the target Real-Time-Unique-Number (N 2 t ) matches the Unique-Number (N 1 ) stored in the token repository, and

authenticating the user based on comparison of the target Real-Time-Unique-Numbers (N 2 t ) with the Unique-Number (N 1 ) stored in the token repository;

e) fetching from the token repository, a user token (T 1 ) corresponding to the Unique-Number (N 1 );

f) identifying from a set of proxy-user management application instances, a proxy-user management application instance corresponding to the user token (T 1 );

g) displaying a request to sign the proxy-user management application session and the corresponding device OS session;

h) capturing the user's approval to affix the user's biometrically authenticated signature to the session;

i) initiating a second authentication process; and

j) recording the user's biometrically authenticated signature in the proxy-user management application session log.

9 . The method of claim 8 , wherein the proxy-user management application is a device operating system, wherein the device operating system corresponds to a computer OS, an Artificial Intelligence (AI) Agent OS, or a Robot OS,

wherein the user is logged into a computer, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the computer operation session,

wherein the AI Agent represents the user when interacting with others, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the AI Agent operation session,

wherein the Robot represents the user, when interacting with others, wherein the user's biometrically authenticated signature in the proxy-user management application session log corresponds to the user's authorization for the Robot operation session.

10 . The method of claim 8 , wherein the session signing request is triggered by the proxy-user management application session based on a set of predefined rules.

11 . The method of claim 10 , wherein the proxy-user management application session is configured to record the user's biometrically authenticated signature, wherein the user's biometrically authenticated signature represents an agreement to abide by the terms and conditions specified in respect of the proxy-user management application session.

12 . The method of claim 8 , wherein the session signing request is generated upon receiving a user command to launch the proxy-user management application session.

13 . The method of claim 8 , wherein the second authentication process is triggered upon capturing the user's approval through the user interface, wherein the second authentication process is the same as the first authentication process.

14 . A non-transitory computer-readable storage medium storing a computer program product comprising computer-executable instructions for managing an Operating System using tokenized identity, which when executed by one or more processors, cause the one or more processors to:

a) maintain a token repository, wherein the token repository is configured to maintain a user token, a Unique-Number, and a Public-Key corresponding to each user from a set of users;

b) registering a user by,

receiving a set of biometric samples of the user corresponding to one or more biometric factors,

processing the set of biometric samples to compute a Secret-Key (S 1 ) corresponding to the user,

generating a Unique-Number (N 1 ) using a random number generation algorithm,

applying a Function (F 1 ) to the Secret-Key (S 1 ) and the Unique-Number (N 1 ) to compute a Public-Key (P 1 ),

storing the Unique-Number (N 1 ) on a provisioned virtual remote device and in a token repository, wherein the provisioned virtual remote device is a virtual machine corresponding to the user, wherein the provisioned virtual remote device is hosted over a remote server, wherein the token repository is hosted over a centralized server, and

storing the Public-Key (P 1 ) in the token repository, on the provisioned virtual remote device, and on a thin client application on a personal local device,

receiving a user input on the thin client application corresponding to one or more immutable attributes of the user,

generating an immutable attribute token for each immutable attribute, and

storing the immutable attribute tokens along with the Public-Key (P 1 ) in the token repository;

c) transmitting to a user, a session signing request from a proxy-user management application, wherein the proxy-user management application is integrated with a device Operating System (OS), wherein the session signing request corresponds to a user-authenticated session, on the device Operating System (OS), wherein the session signing request is received via a thin client session running on a client device;

d) initiating a first authentication process for authenticating the user via the thin client session by,

receiving a biometric sample captured from the user in real-time,

processing the biometric sample to generate a Secret-Key (S 2 ),

when using a thin client application on a personal local device,

selecting the Public-Key (P 1 ) from the thin client application;

fetching the corresponding Public-Key (P 1 ) from the token repository,

computing a Real-Time-Unique-Number (N 2 ) using the Public-Key (P 1 ), the Secret-Key (S 2 ) and the Function (F 1 ), and

authenticating the user based on comparison of the Real-Time-Unique-Number (N 2 ) with the Unique-Number (N 1 ) stored in the token repository,

when using a thin client application on a non-personal local device,

receiving a user input corresponding to the one or more immutable attributes of the user,

generating a token corresponding to each of the one or more immutable attributes,

querying the token repository for one or more tokens,

fetching the public-keys (P 1 -Pn) corresponding to the one or more tokens,

computing a Real-Time-Unique-Number (N 2 ) for each Public-Key (P 1 -Pn), the Secret-Key (S 2 ) and the Function (F 1 ),

identifying a target Real-Time-Unique-Number (N 2 t ), wherein the target Real-Time-Unique-Number (N 2 t ) matches the Unique-Number (N 1 ) stored in the token repository, and

authenticating the user based on comparison of the target Real-Time-Unique-Numbers (N 2 t ) with the Unique-Number (N 1 ) stored in the token repository,

e) fetching from the token repository, a user token (T 1 ) corresponding to the Unique-Number (N 1 );

f) identifying from a set of proxy-user management application instances, a proxy-user management application instance corresponding to the user token (T 1 );

g) displaying a request to sign the proxy-user management application session and the corresponding device OS session;

h) capturing the user's approval to affix the user's biometrically authenticated signature to the session;

i) initiating a second authentication process; and

j) recording the user's biometrically authenticated signature in the proxy-user management application session log.

Assignments (1)

Continuity (6)

References Cited (56)