Abstract: Systems and methods include receiving a request from a Relying Party to verify an attribute that is one or more of an identity and a credential of a user; notifying the user of the request and receiving self-asserted attributes by the user; obtaining Attribute Provider attributes from an Attribute Provider based on the self-asserted attributes; determining an answer to the request based on the self-asserted attributes and the Attribute Provider attributes; and providing the answer to the Relying Party. The systems and methods can further include receiving a response from the user including how much data to release to the Relying Party, wherein the answer is constrained based on the response to one of a yes/no answer, a range, and a detailed response.

Abstract: A computer-implemented method for managing a personal data store is described for binding one or more identities of different types associated with a user. The computer-implemented method is implemented in a trust system including one or more processing devices communicatively coupled to a network. The computer-implemented method includes receiving one or more self-asserted first attributes by the user and second attributes asserted by an Attribute Provider; utilizing one or more of the first attributes and the second attributes as inputs to obtain and/or produce one or more cryptographically signed attributes signed by an associated Attribute Provider; storing the first attributes, the second attributes, and the one or more cryptographically signed attributes in a personal data store associated with the user; and utilizing one or more of the first attributes, the second attributes, and the one or more cryptographically signed attributes to respond to a request from a Relying Party.

Abstract: A computer-implemented method for managing a personal data store is described for binding one or more identities of different types associated with a user. The computer-implemented method is implemented in a trust system including one or more processing devices communicatively coupled to a network. The computer-implemented method includes receiving one or more self-asserted first attributes by the user and second attributes asserted by an Attribute Provider; utilizing one or more of the first attributes and the second attributes as inputs to obtain and/or produce one or more cryptographically signed attributes signed by an associated Attribute Provider; storing the first attributes, the second attributes, and the one or more cryptographically signed attributes in a personal data store associated with the user; and utilizing one or more of the first attributes, the second attributes, and the one or more cryptographically signed attributes to respond to a request from a Relying Party.