Multifactor privacy-enhanced remote identification using a rich credential

A method of identifying a subject to a verifying server over a network, comprising the steps of:

• issuing, by an issuing server, a rich credential to the subject, the rich credential comprising a secret portion and a disclosable portion, the secret portion comprising a private key, the disclosable portion comprising a rich certificate, the rich certificate comprising a typed hash tree and a public key associated with the private key, the typed hash tree having a root label and a plurality of subtrees, the rich certificate further comprising a signature computed on data including the public key and the root label;
• transitioning, by a credential presentation application, the rich certificate from a storage state to a presentation state, the transitioning including pruning one or more subtrees of the typed hash tree without invalidating the signature;
• sending, by the credential presentation application, the rich certificate in the presentation state to the verifying server over the network;
• proving, by the credential presentation application, knowledge of the private key to the verifying server;
• and verifying, by the verifying server, the signature.