Credential abuse prevention and efficient revocation with oblivious third party

摘要

Aspects relate to a computer implemented anonymous credential method for credential abuse prevention and efficient revocation. The method includes acquiring a credential from an issuer at a user, registering the user and credential with an oblivious monitor, generating a user presentation token at the user using the credential, requesting presentation with the oblivious monitor by the user, wherein the user presentation token is transmitted to the oblivious monitor, verifying the user presentation token, wherein presentation is aborted if verification fails, transmitting, from the oblivious monitor, an oblivious monitor presentation token portion to the user in response to the verification passing, transmitting a combined presentation token to a verifier, wherein the combined presentation token includes the user presentation token and the oblivious monitor presentation token portion, and verifying the combined presentation token at the verifier.

主权项

1. A computer implemented anonymous credential method for credential abuse prevention and efficient revocation, the method comprising:
acquiring a credential from an issuer at a user; registering the user and credential with an oblivious monitor; embedding a usage limitation value provided by the oblivious monitor into the credential; generating a user presentation token at the user using the credential; requesting presentation with the oblivious monitor by the user, wherein the user presentation token is transmitted to the oblivious monitor; verifying the user presentation token, wherein presentation is aborted if verification fails; transmitting, from the oblivious monitor, an oblivious monitor presentation token portion to the user in response to the verification passing; transmitting a combined presentation token to a verifier, wherein the combined presentation token comprises the user presentation token and the oblivious monitor presentation token portion; and verifying the combined presentation token at the verifier.