Method and system for decentralized identity management and data distribution

A method for creation and enrollment of digital identities and publishing of identity records, comprising:

• providing one or more realm servers that operate autonomous network services to create, enroll, and validate digital identities affiliated within one or more realms;
• said one or more realm servers distributing digital identity information to computing devices within the realm and with other realms within a federation of realms;
• said one or more realm servers sharing published identity records with subscribing network services for decentralized authentication and authorization of federated identities accessing network services and for verification of digitally signed data with a federated network of realm servers that distribute identity records associated with each realm;
• said one or more realm servers distributing identity records on a subscription basis to computing devices within the realm and to other realms within a federation to maintain relevant identity records on realm servers which distribute said identity records to realm computing devices;
• creating hierarchies of digital identities within a realm to facilitate assignment of digital identities to edge servers, personal, mobile, and other computing devices connected on a private network and/or public Internet;
• using a consensus methodology comprising an addition of one or multiple digital signatures of realm servers within a federation to provide additional validation of identity records;
• and
• sharing published identity records with subscribing network services to enable decentralized authentication and authorization of federated identities accessing network services and verification of digitally signed data with a federated network of realm servers that distribute identity records associated with each realm;
• wherein records are distributed on a subscription basis to computing devices within the realm and to other realms within a federation to enable relevant identity records to be maintained by realm servers which distribute this information to realm computing devices;
• wherein said realm computing devices authenticate access to services using identity records stored locally on the realm computing devices;
• and
• wherein said realm computing devices generate and authenticate digital signatures on information shared with services.