Quintero Romero, Manuel

The invention provides a method for binding a key encapsulation mechanism, KEM, keypair and a signing keypair belonging to a secure element, the method comprising: • providing the KEM keypair and the signing keypair in the secure element; and • providing a certificate for the signing keypair in the secure element, wherein the certificate comprises an identifier referencing to a part or all of the KEM keypair.

A method for enforcing the usage of a credential by a wallet is provided, wherein the credential is stored in the wallet and comprises embedded logic self-asserting its usage, wherein the method comprises:• receiving, by the wallet, an attribute request indicating at least one attribute type and action to be performed by the wallet;• retrieving, by the wallet, at least one attribute stored in the credential, and getting the associated embedded logic,• inputting, by the wallet, at least part of the attribute request and the embedded logic to an action logic engine of the wallet, the action logic engine determining if the at least one attribute stored in the credential can be used in response to the attribute request; and• if action is granted by the action logic engine, performing, by the wallet, the requested action with the requested attribute.

The present invention provides a method for online biometric trait enrollment of a user, wherein the method comprises the steps of:• providing, by the user, identifying information during an online enrollment session through a personal device,• capturing, during the online enrollment session, by a built-in camera of the personal device, a first picture comprising the face of the user, and a second picture comprising the face of the user and a biometric trait of the user,• capturing, during the online enrollment session, by the built-in camera of the personal device or a secondary camera, a third picture comprising the biometric trait of the user,• assessing whether the face and the biometric trait of the second picture belong to the same person, whether the faces in the first and second pictures belong to the same person, and whether the biometric traits in the second and third pictures belong to the same person, and• if positive, associating the biometric trait of the third image with the user and enrolling the user with the associated biometric trait.

The invention relates to a method for detecting outdated attributes in a wallet comprising existing credentials, wherein the method comprises the steps of:• onboarding, by the wallet, a new credential comprising up-to-date attributes,• computing, by the wallet, a mapping mechanism between each of the up-to-date attributes with every attribute of the existing credentials, the mapping mechanism resulting in a mapping table loosely coupling every attribute of the new and existing credentials with one or more of the other attributes,• detecting, by the wallet, if any of the attributes of the pre-existing credentials are associated with any of the up-to-date attributes of the new credential, and, if so, comparing their values,• for each of the pre-existing attributes whose values do not relate to the value of the associated up-to-date attributes, tagging them as potentially outdated and triggering a pre-established action to confirm their status or bring them up to date.

A system (100) and method (400) for managing attributes (304) in an electronic Wallet (eWallet) (114) is disclosed. The method (400) includes transmitting a request corresponding to modify one or more attributes (304) to a credential issuer system (116). Further, the method (400) includes receiving an updated root hash and a signature corresponding to the one or more attributes (304) based on the request. The method (400) includes verifying the signature using a public key. The public key is stored on a public repository (120). Further, the method (400) includes updating the one or more attributes (304) based on the updated root hash and the signature.

The invention provides a method for a reader to access user attributes from a wallet, the method comprising the steps of:- sending, by the wallet, a wallet public key to the reader which, in turns, forwards the wallet public key and an attribute request to an authorizer; wherein the attribute request indicates at least one user attribute;- enforcing, by the authorizer, an access policy determining if the reader can access the at least one user attribute of the attribute request and, if authorized, generating a session key based on the wallet public key and a reader private key;- receiving, by the wallet, a reader public key and the attribute request; wherein the wallet generates an attribute document comprising part or all of the requested at least one user attribute, and generates the session key based on a wallet private key and the reader public key;- encrypting, by the wallet, the attribute document using the generated session key, and sending the encrypted attribute document to the reader;- requesting, by the reader, the session key to the authorizer; and- sending, by the authorizer, the session key to the reader for the reader to decrypt the attribute document and access the at least one user attribute comprised therein.

Protecting an artificial intelligence model installed in an artificial intelligence system developed using the artificial intelligence program development system from being pirated by receiving by the artificial intelligence development system an unprotected artificial intelligence model, transforming the unprotected artificial intelligence model into a protected artificial intelligence model using a transformation function (f) after the training phase of the artificial intelligence model, and operating a protecting Al runtime accessible via an application programming interface to access the protected artificial intelligence model by executing an inverse transformation function (f^-1) incorporated into access routines of the protecting Al runtime.

The invention relates to a method for issuing a verifiable credential for a holder bound to a third party, wherein the method comprises the following steps: - the holder requests the issuer to issue the verifiable credential comprising at least one claim about the holder, - the issuer receives a holder identifier (DID<HOLDER_DOC>), and a third party identifier (DID<THlRD_PARTY>), and binds the at least one claim about the holder to the third party identifier, and - the issuer issues the verifiable credential to the holder.

The invention provides a method to issue a digital stamp for correspondence services, the method comprising the steps of:a stamp vendor receives from a requestor a request to issue the digital stamp for a particular correspondence, the request comprising addresses of a sender and a receiver;the stamp vendor encrypts at least the addresses of the sender and the receiver by using a public key of a delivery company, and generates a digital stamp file comprising at least the encrypted addresses;the stamp vendor publishes the digital stamp file in a distributed ledger as a transaction, and receives back a transaction identifier; andthe stamp vendor transfers the transaction identifier, or a derived form thereof, to the requestor in order to be included in the correspondence as the digital stamp.

The invention provides a method for a delegator to delegate an in-person service remotely to a delegatee, wherein the method comprises the steps of: - the delegator nominates the delegatee and prepares a message comprising at least a delegatee unique identifier, and a delegatee biometrics data; - the delegator authenticates to a third party entity and sends the message; - an onsite verifier ∘ retrieves the delegatee unique identifier and the delegatee portrait from the third party entity, ∘ verifies the delegatee unique identifier provided in-person by the delegatee, captures a delegatee biometrics data, and performs a biometrics matching with the provided delegatee biometrics data; - if verification is successful, onsite verifier grants the delegatee to perform the in-person service.