Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, system and computer program product for delivering a digital identity document. A request is received to purchase a digital identity document from a user by a system. An acquisition uniform resource locator (URL) with parameters corresponding to the identity of the user and the requested digital identity document is created and provided to the user. The user utilizes the received URL to communicate with an issuer to request the digital identity document. The system then receives the requested digital identity document in encrypted form from the issuer. The system then delivers the encrypted digital identity document to the user. In this manner, the system can deliver to the user an identity document in digital form that has been vetted as trusted in a secure manner thereby reducing the number of occurrences in providing improper identity documents as well as lessening the ability to generate falsified identity documents.

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors per form a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: The method utilizes a passport identification number as an element of a homomorphic encryption used to stamp a passport with country entry/exit data to form a digital representation of a subset of information in the passport. As a result, exchange of the digital representation is permitted to allow a selective transfer of information without exposing a user-sensitive passport identification number. The homomorphic encryption comprises a support for exposing a trusted photo and a trusted group containing country travel entry and exit information. The digitally signed passport stamp may then be used to provide verification of the individual by ensuring linkage to that user's passport. The individual's identity and passport verification may occur unconnected, i.e., without having to connect to a central database.

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, system and computer program product for privacy control. A unique identifier for each data element of a group of data elements (e.g., driver's license contains a group of data elements, such as name, driver's license number) is created. These identifiers may be stored along with documentation (e.g., label) of the associated data elements in a manifest file. Alternatively, the identifiers may be stored in a file outside of the manifest file. In this manner, by utilizing a data element identifier which corresponds to a random number, security of privacy information is improved as one would only be able to obtain such sensitive information by obtaining such an identifier. Furthermore, the user only needs to send the requested data elements, as opposed to all the data elements of the group of data elements, to the challenger. In this manner, the user is preserving the security of other privacy information.

Abstract: A method, system and computer program product for facilitating the generating of digital identity documents. A system receives a selection and initialization of properties (e.g., identity attributes, document type, alternate views, an acquisition uniform resource locator (URL)) to be used in a digital identity document (e.g., driver's license). The system then builds a template using the selected properties. The system may then present a list of built templates to a user/verifier to be used in generating a corresponding digital identity document. Upon receiving the selected template, the system provides the acquisition URL associated with the selected template to the user/verifier to be used by the user/verifier to request the corresponding digital identity document from the issuer. After receiving the digital identity document constructed by the issuer from the issuer, the system delivers the received digital identity document to the user/verifier.

Abstract: A method, computer program product, and system obtaining and identity verification request that include a specification for one or more electronic identity documents including one or more requested document types to fulfill the identity verification request. One or more processors locate at least one electronic identity document including each of the requested document types. Each electronic identity document in the repository includes machine readable metadata that includes the document type of that document. The one or more processors perform a deterministic match to select one electronic identity document including each of the one or more requested document types to utilize in formulating a response to the identity verification request and formulate a response to the identity verification request, based on the selected electronic identity document(s).

Abstract: A method, system and computer program product for facilitating the generating of digital identity documents. A system receives a selection and initialization of properties (e.g., identity attributes, document type, alternate views, an acquisition uniform resource locator (URL)) to be used in a digital identity document (e.g., driver's license). The system then builds a template using the selected properties. The system may then present a list of built templates to a user/verifier to be used in generating a corresponding digital identity document. Upon receiving the selected template, the system provides the acquisition URL associated with the selected template to the user/verifier to be used by the user/verifier to request the corresponding digital identity document from the issuer. After receiving the digital identity document constructed by the issuer from the issuer, the system delivers the received digital identity document to the user/verifier.

Abstract: The method utilizes a passport identification number as an element of a homomorphic encryption used to stamp a passport with country entry/exit data to form a digital representation of a subset of information in the passport. As a result, exchange of the digital representation is permitted to allow a selective transfer of information without exposing a user-sensitive passport identification number. The homomorphic encryption comprises a support for exposing a trusted photo and a trusted group containing country travel entry and exit information. The digitally signed passport stamp may then be used to provide verification of the individual by ensuring linkage to that user's passport. The individual's identity and passport verification may occur unconnected, i.e., without having to connect to a central database.