Privacy preserving credential token issuance

A computer program product comprising a computer readable storage medium having a computer readable program stored therein, wherein the computer readable program, when executed in a data processing system, causes the data processing system to:

• receive, from a requester entity, a first request to re-issue a target credential in a plurality of credentials of a public credential listing, wherein any entity, in a plurality of entities, can request re-issuance of any credential in the plurality of credentials and have the credential successfully re-issued to that entity;
• re-randomize, in response to the request to re-issue the target credential, an original public key associated with the target credential to generate a re-randomized public key;
• generate a new credential based on the target credential but with the original public key replaced with the re-randomized public key;
• and
• provide the new credential to the requester entity, wherein the requester entity can use the new credential for authentication transactions successfully only if the requester entity is an owner of the target credential.

An apparatus comprising:

• at least one processor;
• and
• at least one memory coupled to the at least one processor, wherein the at least one memory comprises instructions which, when executed by the at least one processor, cause the at least one processor to:
• receive, from a requester entity, a first request to re-issue a target credential in a plurality of credentials of a public credential listing, wherein any entity, in a plurality of entities, can request re-issuance of any credential in the plurality of credentials and have the credential successfully re-issued to that entity;
• re-randomize, in response to the request to re-issue the target credential, an original public key associated with the target credential to generate a re-randomized public key;
• generate a new credential based on the target credential but with the original public key replaced with the re-randomized public key;
• and
• provide the new credential to the requester entity, wherein the requester entity can use the new credential for authentication transactions successfully only if the requester entity is an owner of the target credential.