Abstract: A system includes an interface, a tenant authentication processor, and an application routing processor. The interface is configured to receive a first request for access. The tenant authentication processor is configured to provide a tenant token request to a tenant process associated with the first request; receive a tenant token from the tenant process; determine a signed tenant token based on the tenant token and a key; and provide the signed tenant token for access to an application routing platform. The application routing processor of the application routing platform is configured to receive an API call comprising the signed tenant token; determine that the signed tenant token is valid; determine an application platform token; determine routing information to an application platform based on the API call; and provide the application platform the API call and the application platform token using the routing information to gain access to the application platform.

Abstract: A system for accessing data includes and interface and a processor. The interface is configured to receive a request to move stored data to a new location and requestor information. The stored data comprises sensitive data. The processor is configured to determine whether read access, storage access, and deletion access are allowed based at least in part on the requestor information; in the event that read access, storage access, and deletion access are allowed: read the sensitive data at an original location using an original token, store the sensitive data to the new location and receive a new token associated with the new location, and delete the original token and the sensitive data at the original location.

Abstract: The system for providing an application includes an interface and a processor. The interface is configured to receive a providing indication to provide the application to a device. The processor is configured to provide the application to the device. The application is configured to receive login information associated with a user; receive an adding indication to add a credential; provide an available indication of credentials available to the user; create a credential request; provide the credential request to a server system; receive the credential; and store the credential.

Abstract: A system for providing an application includes an interface and a processor. The interface is configured to receive an indication to provide an application to a device. The processor is configured to provide the application to the device. The application is configured to receive a request for credentialed information associated with a user from a requesting server; determine whether a stored credential satisfies the request for the credentialed information; and in response to a determination that the stored credential satisfies the request for the credentialed information: determine a response credential for responding to the request; determine that the user approves sharing the credentialed information indicated by the response credential; and provide the response credential to the requesting server.

Abstract: A system for maintaining consistency of a data value using a probability includes an interface and a processor. The interface is configured to receive a data value for storing. The processor is configured to store the data value in a data element of a data structure and determine, using an adaptive filter, a probability of certainty associated with the data value. The adaptive filter receives a previously stored data value in a previously stored data element of a previously stored data structure as input to determine the probability of certainty associated with the data value. The adaptive filter provides as output the probability of certainty. The processor is further configured to store the probability of certainty associated with the data value in the data structure.

Abstract: A system for maintaining consistency of a data value using a probability includes an interface and a processor. The interface is configured to receive a data value for storing. The processor is configured to store the data value in a data element of a data structure and determine, using an adaptive filter, a probability of certainty associated with the data value. The probability of certainty associated with the data value depends on a time since the data value was updated. The adaptive filter provides as output the probability of certainty and store the probability of certainty associated with the data value in the data structure.

Abstract: A system for secure storage audit verification includes a transaction pool and a processor. The transaction pool stores transactions records for a Key Release System (KRS) Audit Agent or a Key Management System (KMS) Audit Agent. The processor is configured to select a transaction, wherein the transaction is awaiting verification in the transaction pool; determine whether the transaction is old; in response to the transaction not being old, select a new transaction; and in response to the transaction being old, indicate to suspend processing of the transaction.

Abstract: A system for data transformation includes a database, a spreadsheet storage of a spreadsheet for planning, an interface, and a processor. The spreadsheet storage is separate from the database. The interface is configured to receive a database datum associated with a large time period. The processor is configured to generate a plurality of spreadsheet data based at least in part on the database datum. Each spreadsheet datum is associated with one of a set of small time periods. The plurality of spreadsheet data is stored in the spreadsheet storage. The spreadsheet storage is separate from the database. The processor is configured to provide the plurality of spreadsheet data for display in the spreadsheet.

Abstract: A system for secure storage of data includes a key database and a processor. The processor is configured to receive a request associated with securely storing data and encrypt the tenant service key using a tenant master key. The data is encrypted using the tenant service key. The processor is further configured to encrypt the tenant master key using a customer key and store encrypted tenant service key and encrypted tenant master key in the key database.

Abstract: A system for secure retrieval of stored data includes an encrypted key database and a processor. The encrypted key database is configured to store an encrypted tenant service key and an encrypted tenant master key. The processor is configured to request decryption of the encrypted tenant master key into an unencrypted tenant master key. The decryption of the encrypted master key is approved by a key release system. The processor is further configured to decrypt the encrypted tenant service key using the unencrypted tenant master key into an unencrypted tenant service key and authorize a response to a request using the unencrypted tenant service key.

Abstract: A system for secure storage audit verification includes a transaction pool and a processor. The transaction pool stores transactions records for a Key Release System (KRS) Audit Agent or a Key Management System (KMS) Audit Agent. The processor is configured to select a transaction, wherein the transaction is awaiting verification in the transaction pool; determine whether the transaction is old; in response to the transaction not being old, select a new transaction; and in response to the transaction being old, indicate to suspend processing of the transaction.

Abstract: A system for secure storage audit verification includes a transaction pool and a processor. The processor is configured to verify a transaction stored in the transaction pool and sign a proposed block. The proposed block is based at least in part on the transaction. The processor is further configured to receive a counter signed proposed block and add the counter signed proposed block to a blockchain.

Abstract: A system for credential authentication includes and interface and a processor. The interface is configured to receive a request for authorization to access from an application. The processor is configured to determine a set of credentials that can enable authorization to access; generate a proof request challenge; receive a proof response; determine that the proof response is valid based at least in part on information stored in a distributed ledger; generate a token; and provide the token.

Abstract: A system for credential authentication includes an interface and a processor. The interface is configured to receive a create indication to create a guest credential representing a guest badge associated with a visitor and receive a claim indication from an authentication device to claim the guest credential. The processor is configured to provide the guest credential to the authentication device in response to the claim indication, provide a proof request to the authentication device, receive a proof response from the authentication device, validate the proof response, determine a visitor tracking system associated with a request from the authentication device to authenticate entry, and provide a check-in indication to the visitor tracking system that the visitor has checked in.

Abstract: A system for credential authentication include an interface configured to receive a create indication to create a location aware credential, wherein the location aware credential specifies visit location data and receive a check in indication to check in from an authentication device, wherein the authentication device provides the check in indication to check in in response to determining that a detected location is within a geographic boundary designated in the visit location data of the location aware credential, and a processor configured to provide a proof request, receive a proof response, validate the proof response using a distributed ledger, and provide a success indication of successful check in.

Abstract: A system for credential authentication includes an interface and a processor. The interface is configured to receive a request from an application for authorization to access. Access to the application is requested by a user using a user device. The processor is configured to provide an authentication request to the user device, receive a device credential, wherein the device credential is backed by data stored in a distributed ledger, determine a user identifier and an authentication device associated with the user based at least in part on the device credential, provide a proof request to the authentication device, receive a proof response, determine that the proof response is valid, generate a token, and provide the token to the application authorizing access for the user.

Abstract: A system for credential storing and verifying includes an interface and a processor. The interface is configured to receive an indication to register a credential. The processor is configured to indicate to store in a distributed ledger a DID document associated with a holder identifier using a smart contract. Storing using the smart contract employs a dual signature authentication scheme to authorize storing based at least in part on an individual signature and a ledger writer signature. The processor is further configured to indicate to store in the distributed ledger a schema associated with an issuer of the credential using the smart contract and indicate to store in the distributed ledger a credential definition associated with the schema using the smart contract.

Abstract: A system for providing an application includes an interface and a processor. The interface is configured to receive an indication to provide an application to a device. The processor is configured to provide the application to the device. The application is configured to: receive a request for a list of valid credentials; determine a list of stored credentials; provide the list of stored credentials to a database system; receive an indication of revoked credentials from the database system; and determine the list of valid credentials based at least in part on the list of stored credentials and the revoked credentials.

Abstract: The system comprises an interface and a processor. The interface is configured to receive a request from an application for authorization to access, wherein access to the application is requested by a user, and receive a task request from the application for authorization to access a task, wherein access to the task is requested by the user. The processor is configured to authenticate the request from the application for authorization to access, determine that the task comprises a sensitive task, determine a user authentication device, provide a challenge for a digital credential to the user authentication device, wherein the digital credential is backed by data stored in a distributed ledger, receive a response from the user authentication device, determine the response is valid, and provide an authorization to access the sensitive task.

Abstract: The system for credential authentication comprises an interface and a processor. The interface is configured to receive a request from an application for authorization to access, wherein access to the application is requested by a user using a user device. The processor is configured to provide a login request to the user; validate a login response; determine a user authentication device based on the login response; provide a proof request to the user authentication device; receive a proof response; determine that the proof response is valid using a distributed ledger; generate a token; and provide the token to the application authorizing access for the user.