Method and apparatus for providing identity claim validation

A method of processing identification information comprising:

• encrypting, using at least one hardware processor, identification information supplied by a user;
• returning an encryption key and the encrypted identification information to the user;
• creating a hash of the encrypted identification information based at least in part on identification information supplied by the user;
• discarding the encrypted identification information and the identification information;
• storing the hash and a private encryption key in an identification management system for validating at least one identity claim using at least one of the hash and the private encryption key without using stored identification information;
• and
• creating a signed token using the hash in the event the at least one identity claim is validated, wherein the signed token supports multifactor authentication.

A system for performing a secure transaction comprising:

• a user computer coupled to a communication network;
• a service provider, coupled to the communications network, for providing services for the user computer through the communications network;
• an identification management system, coupled to the communications network, for:
• creating a hash based at least in part on identification information supplied via the user computer,
• storing the hash for the user computer in a memory of the identification management system,
• discarding the identification information supplied via the user computer, and
• preparing a signed token based on the hash upon request of the user computer, wherein the signed token supports multifactor authentication.