# US 9,882,890 B2 · Reissue of cryptographic credentials > Agents: this data is available as JSON from the patentgrep API and MCP server — see https://patentgrep.com/llms.txt - Number: US 9,882,890 B2 - Document ID: US9882890B2 - Status: Granted - Kind: B2 - Application number: 15/165,277 - Filed: 2016-05-26 - Published: 2016-09-15 - Granted: 2018-01-30 - Earliest claimed: 2012-10-30 - Assignees: International Business Machines Corporation - Applicants: International Business Machines Corporation - Inventors: Jan Camenisch; Anja Lehmann; Gregory Neven - Web page: https://patentgrep.com/patent/US9882890B2 ## CPC - H04L 63/0823: {using certificates (cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263)} - H04L 9/0897: {involving additional devices, e.g. trusted platform module [TPM], smartcard or USB} - H04L 9/3221: {interactive zero-knowledge proofs} - H04L 9/3234: {involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token (network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853)} - H04L 9/3257: {using blind signatures} - H04L 63/061: {for key exchange, e.g. in peer-to-peer networks (cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838)} - H04L 63/0807: {using tickets, e.g. Kerberos (cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213)} - H04L 2209/42: Anonymization, e.g. involving pseudonyms - H04L: TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION (arrangements common to telegraphic and telephonic communication H04M) ## Abstract Effecting reissue in a data processing system of a cryptographic credential certifying a set of attributes, the credential being initially bound to a first secret key stored in a first processing device. A backup token is produced using the first device and comprises a commitment to said set of attributes and proof data permitting verification that the set of attributes in said commitment corresponds to the set of attributes certified by said credential. At a second processing device, a second secret key is stored and blinded to produce a blinded key. A credential template token produced from the backup token and the blinded key is sent to a credential issuer where said verification is performed using the proof data and the credential template token is used to provide a reissued credential, certifying said set of attributes, to the second device, the reissued credential being bound to the second secret key. ## Claims ### Claim 1 A method for effecting reissue of a cryptographic credential certifying a set of attributes, the credential being initially bound to a first secret key stored in a first tamper-resistant processing device, the method comprising: producing a backup token using the first tamper-resistant processing device, the backup token comprising a commitment to said set of attributes and first proof data permitting verification that the set of attributes in said commitment corresponds to the set of attributes certified by said credential; storing the backup token in backup memory; receiving, from a second tamper-resistant processing device storing a second secret key, a blinded key, the blinded key produced by the second tamper-resistant device by blinding the second secret key; producing a credential template token comprising the backup token and the blinded key; sending the credential template token to a credential issuer; receiving, from the credential issuer, a pre-credential, the pre-credential generated by the credential issuer in response to the credential issuer verifying the credential template token, the pre-credential generated using information in the credential template token; and sending the pre-credential to the second tamper-resistant device, wherein the second tamper-resistant device is configured to complete the pre-credential to produce a reissued credential, the reissued credential bound to the second secret key. ### Claim 2 (depends on 1) The method of claim 1, further comprising: receiving, from the second tamper-resistant processing device, second proof data for demonstrating proof of knowledge of the second secret key, wherein the credential template token further comprises the second proof data. ### Claim 3 (depends on 1) The method of claim 1, wherein the first tamper-resistant device stores data associated with the credential, the method further comprising: receiving, from the first tamper-resistant device, state data and a state token, the state token produced by the first tamper-resistant device from the credential and the state data, the state token for authentication of the state data; storing the state data and the state token in the backup memory; sending the state data and the state token to the credential issuer; receiving the state data from the credential issuer based on acceptance of the state token by the credential issuer; and sending the state data to the second tamper-resistant processing device. ### Claim 4 (depends on 1) The method of claim 1, wherein the credential is an anonymous credential. ### Claim 5 A system for effecting reissue of a cryptographic credential certifying a set of attributes, the credential being initially bound to a first secret key stored in a first tamper-resistant processing device, the system comprising: a second tamper-resistant device having a first memory and card control logic, the first memory storing a second secret key; and a first computing system in communication with the second tamper-resistant device, the computing system having a communications interface and credential logic, wherein the card control logic and the credential logic are configured to cause the system to perform a method comprising: blinding the second secret key to produce a blinded key; producing a credential template token comprising a backup token and the blinded key, the backup token stored in a backup memory, the backup token comprising a commitment to said set of attributes and first proof data permitting verification that the set of attributes in said commitment corresponds to the set of attributes certified by said credential, the backup token produced using the first tamper-resistant device; sending, using the communications interface, the credential template token to a credential issuer; receiving, using the communications interface, a pre-credential from the credential issuer, the pre-credential generated by the credential issuer in response to the credential issuer verifying the credential template token, the pre-credential generated using information in the credential template token; and completing the pre-credential to produce a reissued credential, the reissued credential bound to the second secret key. ### Claim 6 (depends on 5) The system of claim 5, wherein the credential template token is produced at the second tamper-resistant device. ### Claim 7 (depends on 5) The system of claim 5, wherein the credential template token is produced by the second tamper-resistant device and the first computing system. ### Claim 8 (depends on 5) The system of claim 5, wherein the method further comprises: at the second tamper-resistant device, producing second proof data for demonstrating proof of knowledge of the second secret key, wherein the credential template token includes the second proof data. ### Claim 9 (depends on 5) The system of claim 5, wherein a state token and state data are stored in the backup memory, the state token produced from the credential and the state data using the first tamper-resistant device, and wherein the method further comprises: sending the state data and the state token to the credential issuer; receiving the state data from the credential issuer based on acceptance of the state token by the credential issuer; and storing the state data in the first memory. ### Claim 10 (depends on 5) The system of claim 5, wherein the credential is an anonymous credential. ### Claim 11 A system for effecting reissue of a cryptographic credential certifying a set of attributes, the credential being initially bound to a first secret key stored in a first tamper-resistant processing device, the system comprising: a second tamper-resistant device having a first memory and card control logic, the first memory storing a second secret key; and a user apparatus in communication with the second tamper-resistant device, the user apparatus having a first communications interface and credential logic; and a credential issuer having a second communications interface and issuer logic, wherein the card control logic, the credential logic, and the issuer logic are configured to cause the system to perform a method comprising: at the second tamper-resistant device, blinding the second secret key to produce a blinded key; producing a credential template token comprising a backup token and the blinded key, the backup token stored in a backup memory, the backup token comprising a commitment to said set of attributes and first proof data permitting verification that the set of attributes in said commitment corresponds to the set of attributes certified by said credential, the backup token produced using the first tamper-resistant device; sending the credential template token to a credential issuer via the first communication interface; and at the credential issuer, performing said verification using the first proof data and using the credential template token to provide a reissued credential, certifying said set of attributes, to the second tamper-resistant device via the user apparatus. ### Claim 12 (depends on 11) The system of claim 11, wherein the credential template token is produced at the second tamper-resistant device. ### Claim 13 (depends on 11) The system of claim 11, wherein the credential template token is produced by the second tamper-resistant device and the first computing system. ### Claim 14 (depends on 11) The system of claim 11, wherein the method further comprises: at the second tamper-resistant device, producing second proof data for demonstrating proof of knowledge of the second secret key, wherein the credential template token includes the second proof data; and at the credential issuer, verifying said proof of knowledge using the second proof data. ### Claim 15 (depends on 11) The system of claim 11, wherein providing the reissued credential to the second tamper-resistant device comprises sending a pre-credential for completion by the second tamper-resistant device to produce the reissued credential. ### Claim 16 (depends on 11) The system of claim 11, wherein a state token and state data are stored in the backup memory, the state token produced from the credential and the state data using the first tamper-resistant device, and wherein the method further comprises: sending the state data and the state token to the credential issuer; and at the credential issuer, verifying said authentication of the state data using the state token and providing the state data to the second tamper-resistant device for storage therein. ### Claim 17 (depends on 11) The system of claim 11, wherein the credential is an anonymous credential.