Systems and methods for interconnected computing resources and event / activity identification information infrastructure using biometric identification of human proximity presence or presence

Abstract

Interconnected computing enables the use of highly diverse environments that support a contemporary civilized operating framework. However, the computational productivity and credibility are disrupted by very immature organizations of this environment. Because current computing entity (e.g., resource) identification infrastructure designs lacking root identification reliability, these environments and their identity infrastructures are decentralized, and unnecessarily unreliable, unsecure, and inadequate of information. This reliability is achieved herein by a bioassay and activity-based portable identification and provenance infrastructure that is substantially accurate and authenticity guaranteed, close to the presence or the quality of the presence. The infrastructure provides ubiquitous available identification information, which can be commonly used in the identification process. Such biometric and activity-based identification information may be acquired contemporaneously and securely fused with or otherwise bound to an associated entity identification information set. This set is used to identify and evaluate entity suitability and / or authenticity, and / or to establish user identities (particular human entities) for individual, social and organizational activities.

Description

[0001] Related applications

[0002] This application claims the benefit of U.S. Provisional Patent Application No. 63 / 365,067, filed May 20, 2022, entitled “EXISTENTIAL BIOMETRICIDENTIFICATION,” which is incorporated herein by reference in its entirety for all purposes. U.S. Patent No. 9,721,086, filed September 13, 2014, entitled “METHODS AND SYSTEMS FOR SECURE AND RELIABLE IDENTITY BASED COMPUTING,” is a continuation-in-part of PCT Application No. PCT / US2014 / 026912, filed March 14, 2014, entitled “METHODS AND SYSTEMS FOR PURPOSEFUL COMPUTING,” which is a continuation-in-part of U.S. Patent No. 9,378,065, filed June 26, 2013, entitled “PURPOSEFUL COMPUTING,” which is a continuation-in-part of U.S. Patent No. 10,075,384, filed March 15, 2013, entitled “PURPOSEFUL COMPUTING,” all of which are incorporated herein by reference in their entireties. These applications are collectively referred to as the Parent Application Set. Background Art

[0003] Modern internet computing does not provide a coherent, generally applicable platform to support the identification and evaluation of available resources from a virtually unlimited pool of resource opportunities. Without specific, significant expertise in a given activity / topic of interest, internet computing often provides inefficient and often insecure identification and evaluation of resource opportunities; such resource identification and evaluation can be unreliable and inadequate, misleading, and misguided, where the lack of adequate resource description / information, including the presence of reliable provenance information, can lead to unfortunate and sometimes destructive consequences due to, for example, embedded malware.

[0004] The immature resource ecosystem of current computing stems, at least in part, from the evolution of connected computing from a patchwork of desktop and client / server computing architectures, which were adopted by a virtually unlimited number of independent parties. While today's computing power has had a transformative impact on human activities, this ecosystem is a highly distributed environment where resources and activities, as well as the results of their use, are often unreliable, risky, inefficient, distorted, and / or inadequate or suboptimal for given resources.

[0005] Connected computing has advanced human productivity and knowledge, but it often fails to support the demands of individual users or groups of users for reliability, trustworthiness, and optimal performance in meeting their priorities and objectives. Computer-based identification information resources provided through connected computing are often inadequate in terms of descriptive identification and attribute information for stakeholders, and when stakeholders are identified, the information is often inadequate, inaccurate, and / or deceptive representations. Information on such resources may contain false and / or misleading content presented by malicious, misidentified, and / or incompetent individuals and / or their respective proxy computing arrangements / organizations, where such individuals and organizations are subject to relatively weak identification processes.

[0006] Today's identification information tools often fail to provide adequate provenance for resource description information, are used inconsistently, and when used, often employ weak / vulnerable (e.g., insecure) identification information technologies. As a result, resource description information is often inadequate and / or may be effectively inaccessible to both non-experts and experts. This inadequate resource characterization identification information (such as stakeholder provenance information) prevents computer users and organizations from achieving the most beneficial / least risky outcomes from their computing activities, and it exposes these users / parties to false, misleading, and / or malicious resource content.

[0007] Modern interconnected computing does not provide a standardized and interoperable interpretive framework to transform its trillions (or quadrillions) of resources (e.g., human actors, devices, software, web pages, media, documents, and communication instances) and an untold array of events / activities into universally accessible, secure, and otherwise reliable resources. Such transformation can be achieved using contemporaneous and / or operationally real-time near-presence or presence of human biometric identification as a root identity anchor for resource and event / activity identification information, such capability operating within a distributed, highly secure network infrastructure arrangement for acquiring, receiving, carrying, forwarding, and using identification information in a distributed, highly secure identity information environment. This identity information infrastructure arrangement, the EBInet (Presence Biometric Identity Network) system, includes a highly reliable and secure system that supports authenticity and provenance assessment of entities (including people and events / activities).

[0008] Connected computing—e.g., peer-to-peer, locally networked, and Internet-based computing—supports the use of highly diverse environments. However, when using today's connected computing environments, productivity and trustworthiness are undermined by the immature organization of the environment and its accessible resources, as well as the significantly inadequate, unreliable, insecure, and poorly informed identification of the attributes and provenance of computing resources. This immature resource environment lacks the suitability for informing user-purpose attributes, regardless of whether such entities / resources are human, non-human, tangible (e.g., devices), and / or intangible (e.g., digital data, software), and lacks the fundamental reliability generated by fundamentally accurate identifiers and attribution infrastructure for identifying people and other entities.

[0009] The system described herein enables robust, ubiquitous, and usable identity information for use in a highly diverse range of identity computing processes. The described system enables determination of entity suitability based on biometrics / liveness, defined facts, and asserted attributes, where such identity information can be used with artificial intelligence and other purposeful computing capabilities. Such identity information can be securely tied to all types of entity and event / activity identifiers and used to assess the suitability and trustworthiness of resources, such as people or other entities. This same infrastructure can be used to establish the authenticity of a user for personal activities, such as starting a user's car, entering a user's residence, contracting for financial transactions, and / or the like, as well as to define stakeholders and prove provenance for information used for organizational, social, and commercial purposes.

[0010] Today's interconnected computing resources and processes are subject to devastating security risks that can sometimes cause serious harm to individuals and / or groups. For example, understanding the provenance of a digital object is important and can be critical. If the activity / presence of a stakeholder (e.g., the creator, modifier, and / or publisher of a digital object) in a transmitted digital resource is spoofed (e.g., during information acquisition and / or activity / presence information use / storage), even if the identity of the stakeholder is typically reliable 99.99% of the time, the consequences of failing to identify the activity / presence spoofing event can be expensive, disruptive, and even catastrophic (e.g., a malware attack leading to the failure of societal infrastructure (e.g., the power grid, hospital operations, financial institution operations, government computer networks, and / or the like)). Summary of the Invention

[0011] Embodiments include systems, devices, methods, and computer-readable media to ensure authenticity of identity, flexibility in placement of identification information, and security related to resource identification and purposeful computing in a computing architecture. BRIEF DESCRIPTION OF THE DRAWINGS

[0012] 1A-1D are tables of acronyms.

[0013] Figure 2 is a description of the symbols used.

[0014] FIG. 3 is a non-limiting example of a tamper-resistant and inspection-resistant acquisition and forwarding station device for acquiring at least a set of biometric identification information of a near presence or quality of presence of a human individual for contemporaneous use.

[0015] FIG4 is a non-limiting example of steps taken by a time delay anomaly system in response to the transmission of an unpredictable set of transmission signals.

[0016] FIG5 is a non-limiting example of a tamper-resistant and inspection-resistant acquisition and forwarding station device that has at least one of the following: (a) uses acquired proximity and / or presence quality biometric identification information to create one or more IISs (e.g., IITs that can be EBICert and / or CIIS); and (b) forwards such acquired biometric identification information and / or such one or more IISs to one or more identity information registration and / or publication services that conform to the EBInet arrangement. Such acquired biometric identification information and / or IISs are alternatively and / or additionally forwarded to one or more RCFDs and / or RUSs, respectively.

[0017] 6 is a non-limiting example of a distributed AFD arrangement used by an organization to provide highly reliable, fault-tolerant, (near) presence-quality IISs (e.g., CBEIISs for the organization's employees, CIISs for AFDA1 / owner components, and CIISs for employees and their respective RCFDs).

[0018] 7 is a non-limiting example of a distributed AFD arrangement used by an organization to provide highly reliable, fault-tolerant, (near) presence-quality IISs (e.g., CBEIISs for the organization's employees, CIISs for AFDA1 / owner components, and CIISs for employees and their respective RCFDs).

[0019] FIG. 8 is a non-limiting example of an EBInet embodiment supporting a RUD and RUS arrangement of receiving IISs for detecting and preventing replay attacks, respectively.

[0020] 9 is a non-limiting example of an AFD creating contemporaneous at least partially biometrically based sets of identification information for different family members (parents P1 and P2, and child C1) RCUFD using respective CIIS and / or CBEIIS for their respective identity purposes.

[0021] FIG. 10 is a non-limiting example of a company employing multiple AFDs to enable its employees to obtain proximity and / or presence biometric information sets that third parties can use to authenticate them with a higher level of rigor.

[0022] Figure 11 is a non-limiting example of a person's personal device that provides a set of personal and work-related identification information about the person for E / A management, where the personal device participates in home and employer EBInet subnet activities according to the respective policies of such subnets and / or other services and / or devices.

[0023] Figure 12 is a non-limiting example of a pBIDE environment that enables an individual to use a local TIIRS to transparently manage the use of IIS / IITs for controlling home appliances, where such management includes forwarding context-appropriate IIS / IITs for different event / activity instances, such as IIT1 for social networking, IIT2 for accessing streaming services (e.g., Netflix, Disney+, and / or the like), and IIT3 for online banking and interacting with P1's employer computing environment.

[0024] FIG13 is a non-limiting example illustrating an embodiment of a converged entity comprising a user U1 and an associated RCUFD ( RCUFD1 / O1 ) that generates and registers its EBICert.

[0025] FIG14 is a non-limiting example of one embodiment showing an RCUFD device RCUFD1 / O2 used in a high security environment, where RCUFD1 / O2 securely discards the private key after use until it is subsequently needed and then regenerates the key.

[0026] Figure 15A is a non-limiting example of an embodiment regarding two users U1 and U2, which use their respective RCUFDs to exchange respective EBICerts in anticipation of user U1 sending a signed document to user U2, which only U2 can decrypt after U2's liveness / presence is determined during biometric capture.

[0027] FIG. 15B is a non-limiting example of an embodiment showing U1 employing RCUFD1 to create an EBIbox ( EBIbox1 ) containing the signed and encrypted Doc1 that only U2 can access in clear text after verifying U2's liveness.

[0028] Figure 15C is a non-limiting example illustrating an embodiment of a U2 decryption document, where such decryption requires U2 / RCUFD2 to use contemporaneous CIIS for U2 presence and RCUFD2 identification, and SE5 / NIIPU2 for U2 biometric identification for physical liveness verification and identification confirmation.

[0029] FIG. 16 is a non-limiting example of certain EBInet device deployment security procedures and security hardening elements.

[0030] FIG. 17 is a non-limiting example of an EBInet AFD generating an IIT, which is received by individual RCFDs and forwarded to the RUD and / or RUS.

[0031] Figure 18A is a non-limiting example of an embodiment of an IIT (IIT1) generated by an AFSD (AFSD1). Such IIT is then forwarded to RCUFD1 / O2, which in turn creates and carries an IIT (IIT2).

[0032] FIG. 18B is a continuation of the non-limiting embodiment of FIG. 18A showing a token being generated and forwarded from RCUFD1 to RUD1.

[0033] FIG. 19A is a non-limiting example of an embodiment where an IIT is being generated and forwarded from AFSD1 to RCUFD1 to be carried as an IIT.

[0034] FIG. 19B is a continuation of the non-limiting embodiment of the IIT shown in FIG. 19A being generated and forwarded from RCUFD1 to RUD1 for use in managing E / A instances.

[0035] Figure 20 is a non-limiting example of an embodiment of a TIIRS provenance information storage and usage event / activity set that stores provenance information in the cloud and / or local cloud and uses such provenance information for matching, applicability analysis, and policy enforcement.

[0036] Figure 21 is a non-limiting example of an identity-governed EBISeaal structure for providing a supply chain and operational integrity assurance framework that avoids and / or resists attacks on computing environments by unauthorized entities (e.g., people / parties) by securely creating and limiting modifications to software / firmware / hardware (s / f / h), and where the types of authorized creation and modification are only performed by individuals who are registered and / or explicitly authorized according to the EBISeaal / IGF specification set and have biometric identification.

[0037] Figure 22 is a non-limiting example of an Identity Governed Fabric (IGF) for a computer identity / security framework that provides supply chain and operational integrity, which is used to resist and repel attacks on computing software and hardware environments by unauthorized individuals.

[0038] Figure 23 is a non-limiting example of a provenance / verification authorization chain of IISs supporting an identification authorization sequence of provenance information used to certify RFD1's SVCC EBInet device deployment audit sequence (IISs based at least in part on biometrics of the quality of the respective proximity presence and / or presence of the respective manufacturing and retail individuals using the device), such an audit sequence consisting of a collection of audit-related IISs of contextually appropriate SVCC sequence instances.

[0039] Figure 24 is a non-limiting example of an information instance of a provenance / verification authorization chain of IISs supporting an identification authorization sequence of provenance information, wherein the provenance information is used to prove RFD1's SVCC EBInet device deployment audit sequence (IISs based at least in part on biometrics of the corresponding proximity presence and / or quality of presence of the corresponding manufacturing and retail individuals using the device), such an audit sequence consisting of a collection of audit-related IISs of contextually appropriate SVCC sequence instances.

[0040] 25A-25B are non-limiting example tables including Figures 26-28 show a list of device placements, their respective owners, and users.

[0041] FIG. 26 is a non-limiting example of a provenance / verification authorization chain for an IIS supporting an identification authorization sequence RCFD1 for certifying an EBInet device deployment.

[0042] FIG27 is a non-limiting example of retailer identification information including RetailPer1, RCFD2, and at least a portion of RetailPer1's proximity or quality of presence biometric identification information acquisition device arrangement AFD2. This information is used for E / A retail transaction information acquisition and related E / A identity verification / authentication, other assessments, and / or monitoring / recording.

[0043] FIG. 28 is a non-limiting example of AFD1 provenance identification information, wherein such information pertains to an attestation of AFD1 , wherein such attestation includes attestation of RCFD3 and AFD3 by ManPer5 / RCFD7 and ManPer7 / RCFD8 , respectively.

[0044] FIG. 29 is a non-limiting example of a system that ensures the authenticity of the identities of message senders and recipients, communicates facts and / or other attributes associated with the identities, and ensures the reliability of certain key attribute types.

[0045] FIG. 30 is a non-limiting example of an EBInet-compliant email system that authenticates the existence and attributes of senders and recipients, respectively.

[0046] Figure 31 is a non-limiting example of a generally available biometric identification environment (pBIDE) embodiment that enables: (i) an email sender to obtain the personal biometric and / or composite IIT and / or EBICert of the intended recipient of the email message to ensure that the email message is presented in plain text only in the presence of a corresponding appropriate, e.g., contemporaneous, at least partially biometric-based IIS of the intended recipient of the email; and (ii) the email recipient to authenticate the identity of the sender (and / or be otherwise informed about the identity of the sender).

[0047] Figure 32 is a non-limiting example of a generally available biometric identity environment (pBIDE) that enables EBInet devices and / or service arrangements to interact with TIIRS1 to obtain and / or employ a contemporaneous, at least partially biometric-based IIS (e.g., an IIT in the form of EBICert, CIIS, or CBEIIS) that approximates presence and / or quality of presence for authenticating and / or otherwise evaluating an IIS provided for an E / A instance.

[0048] 33 is a non-limiting example of RCUFD1 using biometric information of proximity presence or quality of presence forwarded by AFD1 / O1 to generate an actionable at least partially biometric-based IIS of proximity presence or quality of presence for P1.

[0049] FIG34 is a non-limiting example of SVCC REAI process management.

[0050] Figures 35A-35B are Table of components described in Figures 36A-39 .

[0051] Figure 36A is a non-limiting example of activating SIMC1 by activating SIMC1's RUS1 / O3 and EBISEal1 / O3, where SIMC1 is an EBInet-compliant intermodal container, such that EBISEal and RUS (RUS may be integrated into EBISEal) are integrated into IMC1 during and / or after IMC1 manufacturing is completed to enable monitoring and / or management of access to IMC1 (now SIMC1), other interactions with IMC1, and / or other monitoring and / or control of IMC1.

[0052] Figure 36B is a non-limiting example of an EBISeale arrangement for a SIMC that provides an irrefutable transaction history regarding such SIMC and related event / activity instances using an EBIBlockChain comprising one or more EBIBlocks that are securely generated and forwarded, containing associated E / A instance transaction information regarding such SIMC.

[0053] FIG37A is a non-limiting example of a Supply, Value and / or Other Commercial Chain (SVCC) stakeholder providing EBI Seal1 with a Signed Existence Expectation List (ESAM), which EBI Seal1 can use to govern SIMC1's E / A instances.

[0054] Figure 37B is a non-limiting example of a service arrangement based on an SVCC management network that provides an irrefutable transaction history about a SIMC in an EBIBlockChain, which includes a securely generated and forwarded EBIBlock containing relevant E / A instance transaction information about such SIMC.

[0055] 38A-38B are non-limiting examples of loading a container arrangement and its contents into an operating SIMC (SIMC1).

[0056] Figure 38C is a non-limiting example of SIMC1 after E / A2 is completed, where Crate1 and Crate2 have been loaded into SIMC1, and EBISeaal and / or RUS have created context-related EBIBlocks and added them to the corresponding EBIBlockChain.

[0057] FIG. 38D is a non-limiting example of SIMC1's EBI Seale and / or RUS1 creating an EBIBlock containing E / A transaction information regarding the moving / loading of crates Crate1 and Crate2 into SIMC1.

[0058] FIG39 is a non-limiting example of an SVCC stakeholder human and / or robotic agent removing one or more crates from an SVCC intermodal container.

[0059] 40 is a non-limiting example embodiment illustrating the generation of context-appropriate, at least partially biometric-based IIS / IITs associated with human user P1. One or more such IIS / IITs may include child IIS / IITs derived from the P1 or P1 / RCUFD1 master IIS.

[0060] Figure 41 is a non-limiting example EBInet embodiment illustrating the use of templates based on contextual attribute fields to generate social and non-social specific at least partially biometric based identification information sets (SS-IIT and SAnony-IIT) for tracking event / activity instances.

[0061] Figure 42 is a non-limiting example of an EBInet system that provides a cloud service arrangement that generates a contextually appropriate, socially specific or socially anonymous, at least partially biometric-based set of IIS (such as IITs, eg, EBICert) for a user.

[0062] Figures 43A-43C are non-limiting examples of pBIDE, a pervasive biometric identification environment including mobile identity presentation capabilities, wherein the embodiment enables user P1 to use anonymous, context-appropriate, at least partially biometric identification-based IIT (SAnony-IIT2) to form an affinity group consisting of people carrying their respective EBInet-compliant RCUFDs who share P1's interest in attending the next Super Bowl.

[0063] Figure 44 is an overview of a non-limiting example of a trusted pBIDE arrangement illustrated by Figures 46A-46E that enables a CertPer, Stakeholder, and / or User and / or their Device and / or Service arrangement to (i) register an IIS for a REAI (e.g., an IIS for a REAI CertPer, Stakeholder, User, and / or Personal / Device Converged Identity Entity); (ii) authenticate / verify the IIS for such a REAI; and / or (iii) identify / evaluate one or more suitable REAIs for meeting the User's respective purposes.

[0064] Figure 45 is a diagram describing Table of human roles and EBInet devices in Figures 46A-46E .

[0065] Figure 46A is a non-limiting example of TIIRS, which is an established pBIDE trusted identity information resource registration / assessment / management service arrangement that enables CertPers, Stakeholders and / or Users and their EBInet devices and / or service arrangements to securely: (i) register such CertPers, Stakeholders and / or Users' respective individuals, devices, services, instances and / or associated other entities using the instance's respective IIS, (ii) authenticate / verify such instances; and / or (iii) identify / assess / manage one or more appropriate resources and / or events / activities to achieve the user's respective objectives.

[0066] Figure 46B (continued from Figure 46A) is a non-limiting example of an established trusted pBIDE arrangement that enables a user (CertPer1) to issue service certificates and register / publish resource set RS1 to third parties using the CIIS of a fused identity entity, which fused identity entity includes such user and such user's RCUFD, such CIIS being carried by such user's RCUFD securely integrated into a parent smartphone device arrangement PD1.

[0067] FIG. 46C (continued from FIG. 46B ) is a non-limiting example of RCUFD3 / U1 retrieving from Pub1 a copy of resource set RS1(2) and the associated CIIS set, which is registered with TIIRS1 and published by Pub1.

[0068] Figure 46D (continued from Figure 46C) is a non-limiting example of RCUFD3 / U2 interacting with TIIRS1 (and / or (one or more) other related services) to determine the authenticity and / or applicability of TIIRS1 to certify, authenticate and / or provide attribute information about registered resources.

[0069] Figure 46E (continued from Figure 46D) is a non-limiting example of RCUFD4 / U2 conducting and / or performing a suitability assessment and determination of the authenticity of RS1 received from RCUFD3 / U1 (e.g., the authenticity of whether RS1 has been modified (e.g., maliciously)).

[0070] Figures 47A-47E are non-limiting examples of one or more TIIRS and / or EBICert device arrangements that build and manage an SVCC provenance EBIBlockChain including an EBIBlock, whose primary subject is RCUFD2 and RCUFD2-associated E / A.

[0071] 48A-48B are a list of human parties and their device arrangements and EBICerts.

[0072] FIG49 is a list of human parties and descriptions of their functions.

[0073] Figure 50 is a non-limiting illustrative example showing a central bank and / or other regulatory monetary authority minting digital coins and creating corresponding IISs, registering such minted digital coins and corresponding IISs with the TIIRS, and at least partially storing the minted digital coins with the central bank's agent biometric signature until a financial institution (e.g., a commercial bank) requests one or more sets of digital coins in an intended banking transaction.

[0074] Figure 51A is a non-limiting illustrative example showing a central bank and / or other monetary institution arrangement selling, lending and / or otherwise providing its minted digital coins to commercial bank Bank1, where the bank stores the digital coins so obtained in a secure repository arrangement (until it satisfies its customers' respective monetary transaction requests).

[0075] Figure 51B is a non-limiting example of an arrangement in which a central bank sells, lends, and / or provides minted digital coins to commercial banks, where such commercial banks store the minted digital coins purchased, loaned, and / or consigned in a secure repository (until their customers request a transaction).

[0076] FIG51C is a non-limiting illustrative example of a central bank arrangement that sells, lends, and / or provides consignment-minted digital coins to commercial banks, where such banks store the purchased, borrowed, and / or acquired consignment-minted digital coins in a secure repository (until a transaction is requested by their customers).

[0077] Figures 52A-52C are a non-limiting illustrative example showing a monetary authority creating EBICoins and selling, lending and / or otherwise providing such EBICoins to commercial banks, where such banks securely store such acquired EBICoins in a secure repository (until their customers perform currency purchase transactions).

[0078] Figure 53 is a non-limiting illustrative example showing a central bank arrangement that securely: (i) mints digital coins and corresponding IISs; (ii) creates EBICoins, each EBICoin containing a minted digital coin; (iii) creates an IIS for each created EBICoin; and (iv) registers the created EBICoins.

[0079] Figure 54A is a non-limiting illustrative example showing a central bank arrangement that sells, lends and / or otherwise provides EBICoin to financial institution Bank1, where the bank stores bank-mined digital coins in EBICoin in a secure repository (until action is taken on a customer transaction request).

[0080] Figure 54B is a non-limiting illustrative example showing a central bank arrangement for selling, lending and / or providing consignment-minted digital coins to commercial bank Bank1, where such bank stores purchased, borrowed and / or otherwise acquired (e.g., consigned) EBICoins in a secure repository (until, for example, in response to a customer's transaction request, where such bank transfers such coins into newly created EBICoins).

[0081] Figure 54C is a non-limiting illustrative example showing a central bank arrangement creating EBICoins and selling, lending and / or otherwise providing such EBICoins to financial institutions (e.g., commercial banks), where such institutions store such purchased, borrowed and / or acquired one or more EBICoins in a secure repository (until a transaction request is made by their customers).

[0082] FIG. 55A is a non-limiting example illustrating the process steps performed when a user requests to purchase EBICoins of a corresponding specified denomination from a financial institution (eg, a commercial bank) in exchange for traditional currency.

[0083] FIG. 55B is a non-limiting example illustrating the process steps performed when a user requests to purchase EBICoins of a corresponding specified denomination from a bank in exchange for traditional currency.

[0084] FIG. 55C is a non-limiting example illustrating the process steps performed when a user requests to purchase one or more denominations of EBICoin from a bank in exchange for traditional currency.

[0085] 56A-56C are non-limiting illustrative examples showing the process steps performed when a user requests to purchase EBICoins of corresponding specified denominations from a financial institution (eg, a commercial bank) in exchange for traditional currency.

[0086] Figures 57A-57B are a non-limiting example of the process steps performed when a user requests to purchase a specified denomination of EBICoin from a commercial bank in exchange for traditional currency, where the commercial bank manages the EBICoin it has obtained from the central bank.

[0087] Figures 58A-58C are non-limiting illustrative examples of a set of financial transaction processes in which user U1 participates in a transaction that causes Bank 1 to securely: (i) simultaneously as part of the transaction, cancel EBICoin1 containing the digital coin CoinA owned by U1 and create EBICoin4 containing CoinA and the associated CIIS; (ii) create an EBIBlock that records the transfer of ownership; (iii) register EBICoin4 and the associated CIIS1 with TIIRS1; and (iv) forward EBICoin4 to the new owner U2 / RCFD14+.

[0088] Figures 59A-59C are a non-limiting example of a private SVCC EBIBlockChain network for auditing and controlling the manufacturing, distribution, retail, and ownership of EBInet devices.

[0089] Figures 60A-60C are a non-limiting example illustrating a private SVCC EBIBlockChain network for auditing and regulating the manufacture, distribution, and retail of devices such as RFDs.

[0090] Figures 61A-61B are non-limiting illustrative examples of a system and method that uses a set of biometric pattern identifiers and a set of dynamic biological process timing relationships between multiple locations on the human body to ensure active presentation to a specific individual with a high degree of certainty.

[0091] Figure 62 is a non-limiting illustrative example of an AFD container for high stringency activity and bioassay pattern set determination.

[0092] FIG. 63 is a non-limiting example of certain EBInet device arrangement components. DETAILED DESCRIPTION

[0093] 1. Existing Biometric Identification Information Network - EBInet - secure and reliable resource provenance and applicability, interconnected computing infrastructure

[0094] Interconnected computing (e.g., peer-to-peer, local networking, and Internet-based computing) has enabled highly diverse environments that increasingly support the operational framework of contemporary civilization. Interconnected computing has become ubiquitous in modern human life and has greatly changed and, in many ways, improved the lives of people in both developed and developing countries. However, the productivity of today's interconnected computing environments is limited by the extremely immature organization of computing resources. There is a lack of techniques and tools for converting the trillions (or quadrillions) of resources (e.g., devices, software, web pages, information and communication instances, human participants) and the countless arrays of events / activities of modern computing into the most useful and network-safe computing. For modern computing, there is no resource and event / activity identity information infrastructure to support the computing use purpose implementation infrastructure, and there is no computing purpose model to support the resource and event / activity opportunity, applicability, and risk assessment infrastructure.

[0095] Modern computing does not provide a coherent platform to support the identification, evaluation, and use of a virtually unlimited array and diversity of computing resources. Without significant expertise in a given activity or subject of interest, today's connected computing is inefficient; the results of identification and evaluation activities can be inadequate, misleading, and misguided; and computing resources and processes are subject to security risks that can be profound for individuals and / or groups. Computing's immature resource ecosystem stems, at least in part, from the patchwork evolution of connected computing from desktop and client / server computing architectures. While today's computing power has had a transformative impact on human activity, this ecosystem is a highly distributed environment where resources and activities, as well as the results of their use, are often unreliable, risky, inefficient, misrepresented, and / or, for a given resource, inadequate or suboptimal for user purposes. Modern computing has advanced human productivity and knowledge, but it often fails to support the demands of individual users or groups of users for reliability, trustworthiness, and optimal performance that meet their priorities and objectives.

[0096] Computer-based information resources provided through interconnected computing are often inaccurately and / or deceptively represented. Information about such resources may contain false and / or misleading content presented by malicious, misidentified, and / or incompetent individuals and / or their respective proxy computing arrangements / organizations. Such information representing resources is often substantially inadequate and may be effectively inaccessible to non-experts. This prevents computing users / computing parties from achieving the most advantageous results from their computing activities and exposes users / parties to false, misleading, and / or malicious resource content.

[0097] Modern computing lacks a user-informed framework that enables the evaluation of the suitability of interconnected computing resources and activity opportunities, including the outcomes of their use. User tools for such a framework need to support basic information considerations about resources, such as how to efficiently and easily discover and evaluate resources, including how to easily obtain information that supports judgments about the reliability and context of the information representing resources and the relative suitability and usefulness of such resources.

[0098] The inventive framework described in this specification provides an interconnected computing foundation that, without limitation, and in some embodiments, securely supports:

[0099] 1. True and rigorous authenticity of resource and associated event / activity identification information, achieved in part through the use of near-presence quality and / or presence quality resources associated with one or more individuals' biometric-based identification information, provided through the use of a highly mobile, tamper-resistant and inspection-resistant, secure information carrying arrangement that ensures trusted and universally available identification information for event / activity management.

[0100] 2. Resource suitability for user purposes informed by attribution, where such attribution is presented at least in part using quantified qualities of user purpose assertions and highly secure, rule-based, testable / verifiable prescribed facts.

[0101] 3. (One or more) attributes of the attributes of each resource and / or event activity, wherein such attributes of the attributes can be important information about the credibility and / or other suitability of such resource and / or event / activity. For example, the framework of the present invention can provide attributes of highly reliable resource attributes, wherein resource attributes can include their creator, provider, publisher, participant, and / or the like. In such an example, the attributes of such a person can provide basic information about the corresponding associated resources of such a person, that is, the suitability (e.g., credibility and / or usefulness) of any such resource for (one or more) user purposes. Such attributes (e.g., for resource certifiers) can provide personal authenticity information (e.g., using biometric identification) and / or competitiveness (e.g., expertise), and / or reveal information about the suitability of such a person's motivation / credibility for the interests of the corresponding user.

[0102] 4. Resources and because of related associated events / activities, related provenance identification information which may show previously associated participating devices, services and / or biometric identification human history related provenance information.

[0103] Today's interconnected computing platform can be considered a "state-of-the-art" first generation environment. It has proven to be very capable / productive, but in many ways it is very primitive because today's computing environment cannot provide a consistent and distributed infrastructure for identifying information resources and events / activities, and further cannot provide formal context-specific computing capabilities.

[0104] Today's internet computing lacks a universal, class-independent, standardized and interoperably interpretable, highly secure, identity-based, and user-purpose-optimized computing framework. The embodiments discussed in this specification can transform computer users' ability to reliably assess / understand the suitability (including trustworthiness) of network-based computing resources and events / activities; this can lead to substantial improvements in associated computer-related network security, privilege management, and overall user work quality and productivity.

[0105] Until recently, there has been no, or at least no identifiable, focus on creating systems that provide reliable biometric identification and attribute-based resource and event / activity applicability frameworks. More specifically, there are no available or proposed systems that employ (a) biometric-based identification that approaches presence or quality of presence to support contextually practical and substantially reliable resource identification, (b) an attribute-based computing resource and event / activity subject applicability and participant rights management framework, and (c) a highly mobile, very low-friction, context-adaptive, and, for example, contextually or always-available subject (resource and / or event / activity) identity information environment. Such an identity environment would include a cost-effective, highly mobile, smart device-compatible, quality of presence biometric-based human and other resource identification information infrastructure. In certain embodiments, such an infrastructure could employ standardized fit-for-purpose qualities, valid facts (specified and verifiable facts), and purpose-expressed applicability attributes securely associated with computing resources and / or event / activity instances.

[0106] This associative framework enables a highly flexible and context-adaptive computing infrastructure for suitability and rights management. The lack of close proximity or quality identification information for human stakeholders combined with standardized and interoperably interpretable sets of stakeholder attribute information is a serious shortcoming in today's universe of interconnected computing resources. Such attribute information sets, securely bound to rigorous and reliable sets of resource and / or event / activity identification information, can significantly improve computing productivity and security, and the lack of this infrastructure represents a critical set of shortcomings in modern computing capabilities to:

[0107] (a) protect against malicious and otherwise inappropriate online behavior, such as computer hacking, impersonation, falsification, and other manipulation of news, science, and facts, mislabeling, and failure to respect or enforce stakeholder and user rights, and

[0108] (b) Provide a system for identifying resources and event / activity instances that are optimally suitable, that is, most efficient and / or otherwise appropriate for user purposes and interests.

[0109] This specification describes system-based resource and associated event / activity information governance and suitability computing, for example, for secure and reliable: social and business networking and communications, supply and other value chain management, information quality and integrity assessment (and integrity assurance including identification / assessment of false facts / news), digital currency value storage and transactions, digital object authentication and integrity maintenance, digital object and event / activity auditing (e.g., using EBIBlockChain and / or other provenance systems), and / or identification of resources that are most useful and / or otherwise suitable for a user's respective purposes.

[0110] For example, important areas where the EBInet embodiments discussed herein can significantly improve computing include:

[0111] Cybersecurity, including the use of existing biometric-based identification information bound to standardized expressions of suitability-informed attributes. Such binding informs about and can thwart or otherwise prevent cybersecurity threats and events, such as identifying and / or avoiding / disabling / rejecting malware, based on information about resource cybersecurity considerations. For example, cybersecurity controls can be based at least in part on respective attributes of a resource, resource provenance, and / or individuals associated with a resource (e.g., resource stakeholders) (e.g., attributes of the owner, creator, provider, and / or publisher of a corresponding resource instance) that inform about trustworthiness, expertise, occupation, achievements, memberships, certifications, publications, and / or other attributes deemed relevant to cybersecurity;

[0112] · Enhancement of communication security between individuals and / or organizations, source identification related to the communication, and usage control related to the source identification, for example, by informing about the respective motivations, competitiveness and / or other appropriateness considerations of the senders of the communication. Such informing can be achieved by securely binding the sender's existing biometric quality identification information to one or more valid factual provisions. For example, a bank can stipulate in a securely testable / verifiable identification information set that it is obvious that an email sent by such a bank is genuinely sent by an employee of the bank who is authorized to send the email. Such a person proves that he / she is the sender by providing a simultaneous and / or operationally simultaneous, near-existing or existing quality person and bank identification information set in such a securely bound information set (and wherein the identity of such a bank itself can be identified / certified by the bank CertPer);

[0113] Social and business networking, including reliable identification of participating individuals involved in anticipated and / or ongoing connected computing activities (e.g., providing suitability-informed attribute information). This identification is accomplished by providing proximity and / or quality-of-presence identification of one or more participating individuals and corresponding attributes of those individuals (such as age, membership, occupation, location, and / or similar valid fact-specifying information);

[0114] Supply, value, and other commercial / social / internet chain monitoring and control, including highly trusted and information-rich product distribution management, blockchain digital currencies (e.g., EBICoin), and other disposal and control implementation chains;

[0115] Authenticity / authenticity verification, such as verification of a REAI (resource and / or event / activity instance) using the proximity and / or quality of presence of a human (CertPer) and / or other verifiable attributes (e.g., non-biometrics) associated with the certifier. For example, verifying such authenticity / authenticity enables highly reliable Internet of Things (IoT) governance and auditing. Such governance and auditing may include verifying the authenticity / integrity of a device arrangement by, at least in part, using the proximity and / or quality of presence of a REAI stakeholder and / or (one or more) other (such as a certifier, CertPer);

[0116] Digital rights management for REAI, thereby ensuring that events / activities are managed according to rights securely associated with REAI-related individuals (e.g., REAI users, owners, and / or participants) identified by biometric proximity presence and / or quality of presence, wherein such rights management can be managed at least in part in response to one or more verifiable non-biometric attributes (e.g., validity facts and / or credibility) of each of these individuals. For example, digital rights can be implemented by associating REAI rules and controls with the following, thereby forming a REAI identification information corresponding rule and control set: (a) biometric proximity presence or quality of presence identification information of a stakeholder, and (b) non-biometric attributes of the stakeholder identification information; and

[0117] Digital currency management and auditing, including the prevention of theft and fraud, is enabled by the use of proximity and / or presence quality biometric identification of currency ownership and transaction participants, which may also include the use of non-biometric, verifiable valid facts and / or credit attributes of one or more of such persons / parties. The EBInet digital currency arrangement employs an EBICoin that specifies the current owner of a corresponding digital coin, with such ownership being defined at least in part using such biometric identification. EBICoins can contain and / or securely reference their respective digital coins, and this definition of digital coin ownership can prevent digital coin theft and fraudulent transactions. Such theft and fraudulent transactions are prevented by using sets of owner proximity and / or presence quality biometric identification information securely bound to their respective sets of digital coins. Using EBICoin, a base (securely contained and / or otherwise securely referenced) collection of digital coins may be identified using (a) a unique identifier for such digital coin and an instance of at least partial proximity existence and / or existence quality information of its issuer (e.g., a biometric certifier (CertPer) of the issuer), and (b) at least partial proximity existence or existence quality information of the current owner of such digital coin. In some embodiments, an EBInet arrangement digital currency, such as EBICoin, may be mined, issued, audited, and / or governed at least in part using a blockchain arrangement (e.g., EBIBlockChain).

[0118] Given the nature of the emerging networked world, the greatest threat to users of computing arrangements is the malicious intent of unidentified bad actors, where malicious manipulation of computing resources has devastating consequences, and where connected computing users are unable to effectively or reliably assess the suitability of resources and / or event / activity instances (e.g., suitability of information, suitability of one or more associated / participating individuals, and / or suitability of computing processes). In particular, today's computing environments fail to provide existing reliable identification tools in a practical, cost-effective, and user-friendly form. Furthermore, today's computing environments are susceptible to spoofing, resulting in identity substitution and other malicious disguises. The lack of practical, highly trustworthy, and cost-effective information tools about identified computing activity individuals and / or individuals' respective resources and / or attributes can allow for erroneous representations of identity attributes, where such representations do not appear appropriate in context, such as for the user's purposes. Today's systems are completely inadequate for the purpose of providing a fully informed set of information about the motivations and / or competitiveness of participants in computing activities.

[0119] This specification describes the use of (a) biometric-based identification information representing proximity and / or quality of presence, and (b) non-biometric attribute information representing each of the associated individuals (e.g., stakeholders, users, certifying individuals), for at least partially secure management of computing resources, to at least partially enable identification, evaluation, selection, auditing, authorization, provisioning, management of use, and / or communication with computing resources and / or computing event / activity instances. The specified systems and methods combine carefully acquired biometric-based identifiers of resource stakeholders, users, and / or certifiers (CertPers) with suitability-informing attributes associated with each such identifier to form an Identity Information Set (IIS) that informs about computing resources and events / activities. Such IISs can be configured and used as Identity Information Tokens (IITs) for computing resources and / or event / activity instances, and, when they include cryptographic key information, can also include, for example, corresponding IIS certificates (Biometric Identity Certificate of Presence (EBICert)).

[0120] Today's interconnected computing fails to provide indisputable and meaningful identification of the identities of individuals involved in, candidates for participation in, and / or otherwise associated with resources and / or events / activities. Current interconnected computing implementations are affected by malicious substitution of human identification information and inaccurate and insufficiently informative representations of human attributes. The EBInet ("Existence Biometric Identity Information Network") embodiment, as described herein, combines indisputable biometric identification with innovative forms of personal identification attribute information (e.g., testable valid facts, and fit-for-purpose quality assertions) to solve important interconnected computing problems. These problems are associated with identifying / understanding the suitability (e.g., based on trustworthiness, risk, productivity, capability / competitiveness) of computing resources (e.g., devices, software, people) and / or users for participating in computing events / activities.

[0121] The EBInet interconnected computing embodiments address the inability of today's computing infrastructure to reliably and indisputably identify individuals who are responsible (e.g., own, control, and / or use) or accountable (e.g., certify) for resources and / or events / activities accessed through interconnected computing. Using the EBInet device arrangement and services, such resources and / or events / activities can be efficiently identified and / or evaluated to calculate suitability for use / interaction / participation, such identification and / or evaluation being based at least in part on attributes of individuals associated with the resources and / or events / activities.

[0122] Today's interconnected computing is deficient in fundamental respects. It does not adequately address the various pressing challenges of effectiveness, efficiency, integrity, and credibility / authenticity of resources and events / activities. EBInet supports clear identification distinctions between human individuals and can generally provide highly reliable and unambiguous representations of contextually important attributes of each of such individuals, individually and / or in combination. Such attributes can include identification information that informs about suitability for a user's purpose. Such information enables evaluation of resources and / or events / activities, at least in part, by assessing the suitability of their respective associated humans for the user's purpose, where, for example, such information can inform about resource authenticity / credibility / security, efficiency, productivity, associated permissions, and / or similar considerations.

[0123] Connected computing suffers from a lack of representational information about human attributes that informs about the suitability of corresponding resources and events / activities (including where humans are resource and / or REAI creators / providers / certifiers / witnesses / participants). Without accurate human identification in a form specifically suited to discerning the suitability of humans or human-associated resources for user purposes, it is generally not feasible to reliably assess human motivation, competence, and other suitability factors for the use and / or participation in a set of computing resources and event / activity instances. At its core, connected computing depends on humans as resources and / or as resource stakeholders (e.g., as creators, providers, modifiers, owners / users, certifiers), and / or as event / activity participants.

[0124] Today's computing arrangements do not provide sufficient, reliable suitability / optimality information to inform about (a) computing resource usage, and / or (b) personal event / activity-related participation. In particular, today's computing environments do not provide sufficiently reliable human-specific identifiers associated with REAIs, nor, for many cases, do they provide sufficiently reliable and standardized suitability / optimality-informing attribute information associated with human identities. Creating a system that can provide such information enables the evaluation of humans and / or their associated (a) resources and / or (b) events / activities by evaluating, for example, the intent, appropriateness, competence / capability, authenticity, and / or digital authority of such humans and / or resources, respectively.

[0125] In many embodiments, EBInet supports a new, standardized form of resource identification infrastructure that presents (enables the representation of) an identity that is a fusion of resource / person identification information, including (a) object content instances and / or their respective identifiers (such objects include, for example, documents, devices, services, websites, people, other objects / entities, and / or their respective unique identifiers), and (b) at least partially biometric-based identification information of a subject person (e.g., SubPer) and / or a certifying person (e.g., CertPer) that approximates the presence or quality of the presence of a subject person (e.g., SubPer). This fusion of at least partial identification information with the subject SubPer and / or certifying CertPer of the object content instance and / or identifier provides information about one or more persons who certify, authenticate, and / or provide information about the applicability of REAI identification information attributes. Such persons can assume direct (CertPer) and / or implicit (SubPer) responsibility for the REAI by users viewing their respective at least partially biometric-based identification information and / or certifying information as information that "supports" their respective resource and / or event activity instances. For example, an IIS user may use such information to authenticate, govern, and / or inform REAI applicability determinations responsive to owner and / or certifier attributes, such as using such information in governing event / activity instances.

[0126] To ensure informed and reliable identification information for REAI instances, EBInet embodiments may employ contemporaneously acquired identification information of proximity and / or quality of presence, which may be acquired, for example, at a biometric identification acquisition and forwarding "station," such as at an individual's home in the morning, and then "carried" by such identified individual in a mobile device arrangement for subsequent contemporaneous use. Such a carried arrangement may serve as an identification information arrangement that provides / makes available, for example, a composite identification information set for a CertPer or SubPer resource object, which composite identification information set includes, at least in part, quality of presence (and / or proximity of presence) biometric identification information of a certifier / witness / owner / user individual and security-associated resource and / or event / activity identification information of such individual. Such contemporaneous and carried proximity and / or quality of presence identification information may be made generally available, for example, via broadcast usage, and / or in response to a request from another EBInet-compliant arrangement, as the context requires. The EBInet concurrent identity information environment improves computing security and reliability by providing a very easy-to-use (use can be transparent / automated), cost-effective infrastructure that can use biometric identity capture at one or more stations to provide presence identity information and eliminates the need to integrate presence capture arrangements into, for example, every biometric identity information using a device arrangement (e.g., mobile phone, tablet, laptop, or other computing arrangement).

[0127] Using EBInet, human identification information, including rigorous and reliable identification of individuals, is combined with standardized and interoperably interpretable representations of such individuals' respective intentions / motivations, competencies, backgrounds, expertise, interests, and / or other applicability-informed details. This identification information framework is used to generate informative and often important input regarding the applicability of computing resources and / or events / activities for user purposes. This association can provide key information that informs the validity and other applicability considerations of such REAI, for example, information regarding threats embedded in and / or otherwise associated with computing resources and / or processes.

[0128] EBInet arrangements may include fused identities (REAI instances uniquely identified and human beings irrefutably biometrically identified, securely bound together as a fused subject) composite identity information sets (CIIS, IIS with composite fused subjects, the composite fused subject including a human being (SubPer) and associated non-human subject components). To date, human identities associated with computing resources and processes (e.g., events / activities) have not been available as interoperably interpretable representations, personal representations (e.g., non-biometric), standardized attribute information sets that are at least partially securely bound to biometric identification information that approximates presence or a quality of presence, such identification information sets being used, for example, for identification, authentication, selection, auditing, authorization, and management of computing resources and / or events / activities. In short, there is currently no standardized and interoperably interpretable resource identification information infrastructure for interconnected computing that securely associates (e.g., cryptographically binds and protects) rigorous and reliable identification information for individuals with their respective securely maintained identity-related attributes. As described herein, the EBInet infrastructure is provided to inform computer users about the suitability of a REAI; for example, a REAI would be inappropriate if such a REAI poses a threat to user interests, or if the creator of the REAI has questionable or insufficient competence / expertise, or if a person lacks authority to participate in a commercial or social networking arrangement (e.g., expressed as a testable valid fact).

[0129] In some embodiments, IISs may each include standardized specifications / expressions of interoperable interpretations of user and / or stakeholder objectives, wherein each such objective expression associated with a REAI has an associated asserted quantified value expressing the relative value of such REAI in achieving such specified / expressed objective (e.g., expressed as Cred). Such IISs may further or alternatively include testable / verifiable interoperable interpretations of one or more facts associated with the corresponding REAI, and / or may include other REAI characterization attributes. The corresponding IIS identifiers, based at least in part on biometrics, and the attributes of their identifier security associations can, for example, be used to reliably and efficiently locate and evaluate resources, including, for example, determining the suitability of using one or more such resources to meet the user's corresponding objective. Resources and events / activities often originate from a very large universe of resources and events / activities, which in many cases lacks a consistent and manageable organizational / information infrastructure to identify and evaluate the highly diverse work products of independently operating resource publishers and event / activity managers and / or participants. The EBInet IIS information implementation provides a framework for efficient identification, filtering, evaluation, and selection of resources and / or events / activities associated with user objectives. Using the EBInet framework, the impact of REAI usage can be assessed from the perspective of the competencies, backgrounds and / or motivations of the various REAI stakeholders as creators, publishers, providers and / or participants.

[0130] Biometric identification of REAI stakeholder and user individuals and secure (e.g., cryptographic) binding of biometric-based identification information with associated characterizing attributes of corresponding such individuals, and further binding of such information sets with corresponding REAIs as described in this specification, can achieve significant improvements in the trustworthiness of REAIs and their relevance and applicability in achieving user objectives. Such biometric identification and liveness testing, when performed using near-presence or presence identification and employed as described in the embodiments of this specification, can ensure convenient, cost-effective stakeholder and user REAI identification and assessment, thereby addressing many of the deficiencies inherent in working with an unlimited, relatively immature universe of resources.

[0131] Using known technologies, it is technically and economically infeasible to widely and repeatedly implement existing reliable biometric identification capabilities within highly mobile device types such as smartphones, tablets, smart watches, smart bracelets, smart pendants, and / or the like. It is neither sufficiently user-friendly nor economically and / or operationally practical to redundantly incorporate such existing reliable capabilities within various non-mobile computer and computer management arrangements, for example, within computer management arrangements individually managed by each user and / or one or more groups of such users, such as (a) desktop computers, (b) IoT instances, and / or (c) manufacturing, supply, and / or value chain, and / or other groups of shared computer management arrangements.

[0132] In some embodiments, the presence biometric identity network of the present specification provides a human personal identification arrangement based at least in part on biometrics, which employs a proximity and / or quality of presence biometric identification information acquisition arrangement in communication with an associated receive, carry, use, and forward (RCUFD) other biometric identification information device arrangement. Such RCUFDs receive and carry highly reliable biometric identification information; they act as mobile identity wallet arrangements, supplying identity information to a network or other interconnected computing arrangement for event / activity management.

[0133] Human intent / motivation is at the root of human behavior, and since the origins of our species, human security and trust have been largely based on knowledge of the motivations and / or intentions of "other" human actors. Unfortunately, modern computing resource and event-related technologies are often unable to reliably and specifically inform about the identity and trustworthiness, authority, motivation, and / or other applicability aspects of human computing activity participants, such as those human groups involved in creating, disposing of, and / or modifying computing and computationally managed resources, and / or those human groups participating in or otherwise directly associated with human computing events / activities. Reputational and factual attributes about participants in such computing activities (identified by biometrics of near presence or quality of presence) can be essential in determining whether such participants and / or their respective resources and / or events / activities are authorized and / or trustworthy and / or otherwise compliant with / appropriate for users, stakeholders, and / or other resource and / or event / activity purposes and / or policies (including REAI rights management).

[0134] The basis of human trust is almost entirely based on identifying human intent and / or competence. Confidence in the applicability of REAI relies on the ability of humans to identify, specifically for a given human, and generally and / or situationally / contextually, the associated attributes that inform about intent, trustworthiness, and competence. Given the importance of reliably identifying information about who is "behind" or "backing" a resource and / or event / activity set instance (e.g., a REA instance that a user wants to use, is considering using, and / or wants to interact with), EBInet provides a practical and cost-effective arrangement of identification information acquisition, carrying, receiving, using, and forwarding devices and information sets that supports the identification and use of the proximity and / or presence of instances associated with identification information of one or more persons of interest.

[0135] The effectiveness of today's computing environments is severely hampered by their unreliable and inadequate arrangement of resource and event / activity identification information. For example, today's computing systems:

[0136] 1. Insecurely obtain, maintain, and provide reliable identification of the presence (or near-presence) of computational REAI stakeholders and / or users (including, for example, event / activity participants), and, for example, insecurely provide standardized and interoperable interpretations of at least some of such biometric-based identifications (with liveness analysis) of individuals associated with such instances;

[0137] 2. Does not include a secure human identification information receiving and forwarding mobile device arrangement that receives biometric-based and contemporaneously acquired stakeholder and / or user identification information from an identification acquisition and forwarding device arrangement that is at least partially proximate to or reliable in quality. In contrast, an EBInet receiving and forwarding mobile device arrangement can securely carry and transparently and contextually provide such identification information. Such identification information can be received and used by devices and / or service arrangements that conform to the standards of the EBInet arrangement;

[0138] 3. Unsecurely binding an at least partially biometrically based identifier of such a stakeholder and / or user (SubPer) and / or certifier (CertPer), respectively, to:

[0139] a. Non-personally unique identifiers and identifying attribute information of at least partially standardized and interoperable interpretations of the subject REAI, including, for example, fitness-for-purpose quality and / or other assertions, testable / verifiable validity facts, contextual purpose expressions, and / or rules and control policy (e.g., rights management) information of the respective standardized and interoperable interpretations of the instances, and / or

[0140] b. Attributes of stakeholders and / or users and / or certifiers of at least partially standardized and interoperably interpreted REAIs (i.e., attributes of one or more corresponding stakeholders and / or users (SubPer) and / or certifiers (CertPer) of such REAIs), such as attributes characterizing properties of such stakeholders and / or users and / or certifiers, e.g., corresponding fitness-for-purpose qualities and / or other assertions, testable / verifiable valid facts, associated contextual purpose expressions, and / or information related to rules and control policies (e.g., authority management for parties and / or individuals).

[0141] 4. Unsafe and unreliable provision of standardized identification information architecture embodiments, such as those described herein, for particularly large and diverse arrays of resources. EBInet embodiments may enable computer-arranged resources and / or event / activity instances, corresponding stakeholders and / or their agents and / or other parties and / or their corresponding work products and / or associated processes and / or events / activities to be reliably assessed for:

[0142] a. suitability, such as credibility and / or validity, with respect to the user's respective internet computing business, social and / or networking requests and / or purposes, and / or

[0143] b. Permissions and / or other authorizations to fulfill the User’s respective business, social and / or networking requests and / or purposes for connected computing.

[0144] Given the inherent unreliability of identifiers associated with remotely sourced resources and event / activity instances, and given the lack of relevant, trusted, and interoperably interpreted resources and event / activity instances to identify / characterize attributes and attribute-based computation management, interconnected computation can be highly inefficient, often providing suboptimal results, and inherently lacking organizational adaptability to purpose frameworks, making it vulnerable to cybersecurity threats and identity misrepresentation and misassessment.

[0145] The EBInet platform and component set represent, in part, a new type of computer resource for REAI based at least in part on an elaboration of biometric identification information sets, where such information sets may each include, for example, a secure combination (e.g., binding) of:

[0146] one or more sets of near-presence and / or presence-reliable, at least in part, biometrically based personal identification information of stakeholders (e.g., SubPer), users, and / or certifiers (e.g., CertPer), where the human identifiers are either very highly reliable or indisputably accurate (e.g., obtained using a near-presence or presence-accurate biometric identity acquisition forwarding device arrangement (AFD)),

[0147] have:

[0148] (a) one or more secure times and / or dates, wherein a time start, stop, period, duration, and / or other representation provides a securely maintained (transmitted and / or stored) instance of time and / or date information for each REAI-related event, such as the time of creation of an IIS. The time information instance (e.g., a timestamped information instance) may include, for example, the time at which biometric identification information was securely generated / provided, wherein, for example, the secure time at which such information was acquired may include the time at which an applicable transmitter of an electromagnetic and / or acoustic signal was transmitted, and / or the time at which a corresponding sensor arrangement received the biometric data,

[0149] (b) one or more secure representations of the location (e.g., of an arrangement carried by a composite device / individual), such as using location information of cellular tower(s), one or more instances of identified Wi-Fi, GPS location acquisition implementations, and / or securely triangulating and / or otherwise locating such an arrangement based at least in part on a biometric-based identity of the respective one or more parties (e.g., based on correlation of the location of the respective individual and / or other parties with a known location (e.g., specified as a verifiable valid fact) of the respective individual's and / or other parties), and

[0150] (c) one or more unique identifiers of the non-human subject(s) of the IIS for the resource and / or event / activity instance, and may also include one or more unique identifiers for the subject portion of the corresponding such IIS,

[0151] (d) one or more identifying information set unique identifiers, which may consist at least in part of, or otherwise employ information having / from, corresponding such non-human subject unique identifiers, and / or

[0152] (e) a standardized and interoperably interpretable description of the purpose of one or more resources (including one or more persons) and / or event / activity instances, characterized by:

[0153] a. Attributes of a REAI Topic and / or Topic Instance that specify the associated usage purpose of such instance, such as PERCos CPE, and

[0154] b. One or more at least partially standardized REAI subjects, and / or subject human stakeholders and / or users, purposeful computation-informed properties, such as PERCos QtPs asserting REAI purposeful computational values, and / or verifiable, prescribed valid facts.

[0155] In some embodiments, the EBInet environment employs at least two forms of secure identity information processing units (IIPUs), such IIPUs comprising highly secure, tamper-resistant hardware-protected processing environments, each of which may be provided in the form of a hardened modular component (or sub-component) arrangement. In some embodiments, such IIPUs comprise embedded component arrangements that operate either within an EBInet standalone device or embedded within a parent (e.g., host) device arrangement (e.g., a mobile computing device such as a mobile phone, where such a mobile device may provide, for example, power, storage space, a convenient mobile package, and / or other supplementary capabilities). Such modular component IIPU arrangements may include several variations, such as a root identity acquisition IIPU (RIIPU) that is at least partially used to acquire proximity and / or presence quality biometric identification information, and a network identity information management IIPU (NIIPU) that may receive, process, carry, forward, and at least partially manage the availability and / or use of a personal or person / device fused identity composite identification information set. The IIPU is designed to have very high standards of anti-tampering and anti-inspection, and provides secure processing, memory and encryption functionality, and such functionality can be implemented to operate independently of other computer processing arrangements (such as those found in the NIIPU's parent smart device). The IIPU is designed to acquire and / or receive biometric-based identification information that approximates presence and / or quality of presence, and can further securely receive and process other personal characterization attribute information, such as valid facts and credit. The integrity of the IIPU components can be maintained by software functions that only support the IIPU's minimum identification information purpose to provide a minimized attack surface. In addition, in some embodiments, the EBInet IIPU can adopt a display arrangement dedicated to the IIPU, including a dedicated or binary switchable portion of the display arrangement, such as a dedicated portion of the user's parent mobile phone screen, and such an IIPU can at least partially receive user instructions provided by using a corresponding trusted path arrangement.

[0156] In some embodiments, the RIIPU is at least in part a highly secure, isolated, and tamper-resistant proximity presence or presence reliable biometric identity acquisition unit. The RIIPU acts at least in part as one or more component components of a corresponding acquisition and forwarding device (AFD) arrangement. The RIIPU acquires biometric data (e.g., to generate patterns and / or other information) to support the determination and generation of a unique biometric identifier for each human being. The RIIPU is a modular component arrangement that can be used at least in part to acquire contemporaneous (for subsequent use) proximity presence or presence quality biometric identity information using such respective sensor arrangements of the RIIPU. Each such RIIPU can at least in part control the AFD electromagnetic and / or acoustic (e.g., ultrasonic) emitter arrangement. Such biometrically acquired human-specific identification information can be used to provide contemporaneous (as discussed herein) human biometric-based identification information for, for example, at least partially contemporaneous identification information aggregation. Such EBInet human-specific identification information instances are based at least in part on such proximity presence and / or presence reliable biometric acquisition processes.

[0157] In some embodiments, the RIIPU parent device may employ one or more frequently used (e.g., regularly used daily) smart mobile device charging and / or other docking arrangements (e.g., a RIIPU embedded in an AC adapter and / or other appliance docking arrangement for a smartphone and / or other mobile device), and / or in some embodiments, the RIIPU may be encapsulated within an AFD external standalone device arrangement. The RIIPU provides extremely reliable proximity presence and / or quality of presence human-specific identification information sets based at least in part on biometrics using a secure, individually protected processing environment (PPE) isolated from non-RIIPU processes, such a PPE performs human-specific identification and activity / presence determination. The RIIPU may be embedded and / or otherwise connected to a computing and / or other appliance arrangement. The RIIPU may serve as the root of an identity proximity presence and / or quality of presence biometric acquisition arrangement that generates identification information based at least in part on biometrics that "anchors" the identification information sets that characterize / identify resources and / or event / activity instances, that is, provides proximity presence or personal specific identity information. Within the RIIPU, NIIIPU, and / or EBInet service arrangement, such anchor information sets are securely bound to attribute information describing their respective resources and / or event / activity instances. In some embodiments, such a root IIPU device arrangement can forward identification information based at least in part on biometrics to other EBInet devices and / or service arrangements, wherein such other devices and / or service arrangements can at least partially perform highly secure EBInet identity management functions, but wherein such other EBInet devices and / or service arrangements do not obtain, for example, the root individual-specific raw biometric identification information of proximity or presence. Such RIIPU data sets based at least in part on biometrics can be acquired and processed in the highly secure, isolated processing, tamper-proof and inspection-proof, resource and / or event activity instance identification information acquisition arrangement of each such data set. Such an arrangement can also formulate, evaluate, forward, receive, and / or manage / process such a set using isolated processing performed in a compliant IIPU arrangement.

[0158] In various embodiments, a root IIPU (RIIPU) is used in conjunction with a NIIPU, wherein such a NIIPU may include a highly secure, isolated, tamper-resistant and inspectable, low-cost and energy-efficient modular component identification information receiving, carrying, using and forwarding component arrangement. In contrast to the RIIPU, the NIIPU does not use its own corresponding sensor biometric arrangement of proximity or quality of presence to obtain personal identification information based at least in part on biometrics. The NIIPU arrangement typically performs the reception, carrying, use (e.g., issuance and / or event / activity authorization), evaluation and / or forwarding of one or more sets of human identity information acquired by a contemporaneous AFD and based at least in part on biometrics, for example, at least in part by an AFD RIIPU and forwarded from such AFD to an embedded RCUFD NIIPU. Such an RCFD NIIPU may then forward such identity information to an EBInet-compliant RUD and / or RUS arrangement that uses IIS information for event / activity management (such RUD and / or RUS includes receiving and using identification information of EBInet device and / or service arrangements).

[0159] In some embodiments, the NIIPU arrangement may also perform (and / or receive) biometric identification using parent device and / or network-based, sensor-acquired, non-existent biometric identification information. The EBInet identification information set is used as identification information for corresponding resources and / or event / activity instances, and such contemporaneous identification information may "expire," i.e., become invalid, after a real-time, time period, and / or other security-specified event determined by a secure clock (e.g., the NIIPU secure clock).

[0160] In various embodiments, in addition to associating a REAI with biometric identification information of a person, the identification information set may also include other (e.g., securely bound) descriptive attributes of such a person and / or corresponding REAI, such as, for example, such a person's associated REAI (such attributes including, for example, corresponding fit-for-purpose qualities and / or testable / verifiable prescribed facts). Such modular components RIIPU and NIIPU arrangements are respectively embedded and / or otherwise securely coupled (such as via wired, wireless, and / or other I / O connection(s)) with their respective parent arrangements.

[0161] In some embodiments, EBInet publishes, registers, and / or otherwise stores a uniquely identified set of identity information (IIS) based at least in part on biometrics to one or more corresponding identity information devices, platforms, clouds, and / or organizations, services. Such published, registered, and / or otherwise stored sets and / or their identifying information (e.g., hashes) are subsequently made available for later use by IIS consumers and / or devices compliant with the EBInet arrangement, at least partially independent of the respective set creation, publication, and / or registration processes (e.g., individuals / devices / services that use a given set of identity information but are not the creators / publishers). Such processes (e.g., performed by biometrically authenticated parties) can generate cryptographically protected IIS (e.g., at least partially cryptographically hashed and biometrically signed IIS).

[0162] Such published, registered and / or otherwise stored identification information sets based at least in part on biometrics are available for secure reference and use by one or more at least partially independent parties of interest. Such publication may involve, for example, secure publication to cloud services and / or other management, operation and / or utility services, where such published identification information instances may be securely registered as resource and / or event / activity IISs. Such IISs representing corresponding resources and / or events / activities may be securely associated with corresponding resource and / or event / activity subject instances of such information sets (e.g., securely bound to corresponding resource and / or event / activity subject instances of such information sets). Such instances may include, for example, documents, digital currencies, computer programs, videos, web pages, digital currencies, NFTs, communication instances (e.g., emails, tweets and / or chat instances), financial-based value exchange, computing / communication interfaces to people and / or other tangible items (e.g., IoT, user "intelligence" and / or supply, value and / or other business chains, device arrangements), social network sessions, metaverse sessions and / or the like.

[0163] In some embodiments, instances of identification information based at least in part on biometrics can be securely stored in a mobile smart parent device and / or a dedicated identification information device and carried by and / or otherwise associated with the respective owner and / or user, wherein such carried identification information based at least in part on biometrics is at least partially close to or accurate (a unique identifier for a human individual). Such identification information based at least in part on biometrics can be used, for example, in a frictionless, transparent manner, to securely and highly reliably convey (a) such owner and / or user's individual-specific identification information as a set of biometrics and other indicative identification information for a specific individual, and / or contextually, and (b) at least partially real-world anonymized IIS that securely provides non-specific identification (i.e., non-social representation) attributes of an individual. Such identification information sets can be used to authorize, evaluate (including authentication and / or otherwise verify), identify, select, provide, and / or use computing resources and / or event / activity instances, respectively.

[0164] The EBInet process can be used to evaluate and / or ensure the suitability and / or accessibility of corresponding resources and / or event / activity subject instances for one or more purposes of a user (e.g., including authorization enforcement in some embodiments). Such suitability evaluation processes can include, for example, identifying and / or evaluating subject instance attribute evaluation and / or identification, including, for example: integrity (e.g., through authentication and / or other verification), trustworthiness (e.g., through attribute evaluation and / or identification), respective permissions of REAI-related parties (e.g., users, owners, etc.) (e.g., for respective event / activity authorizations), provenance information, and / or other relevant characteristics of closely related resources and / or event / activity instances.

[0165] In some embodiments, an EBInet, at least in part, biometric-based IIS, may be at least partially stored on a highly secure RIIPU and / or NIIPU modular component arrangement. Such an arrangement may include a hardened, tamper-resistant, and inspector-resistant secure modular component arrangement for acquiring, carrying, using, and / or forwarding at least partially biometric identification information approximating presence and / or quality of presence, as well as other relevant subject attributes. In some embodiments, such identity modular components are each encapsulated as a hardware and software arrangement that is at least partially isolated, tamper-resistant, and inspector-resistant, and employs abuse countermeasures.

[0166] In some embodiments, there are two general types of EBInet modular components: (a) components that perform more processor-intensive biometric acquisition and analysis functions, such as RIIPUs that support AFSD processing requirements, and (b) components that perform identity information and rights management that are generally less processor-intensive, such as economical, secure NIIPUs that support arrangements that may have more limited processing requirements and therefore have more limited overhead for identification information associated with carrying, forwarding, and / or using functions. In some embodiments, this type of EBInet modular component (i.e., RIIPUs and NIIPUs) can constitute an EBInet environment. In some embodiments, the functions performed by the RIIPU or NIIPU can be performed by a local device component arrangement. For example, the AFSD can use, for example, Apple's secure enclave capabilities to support secure (e.g., tamper-resistant) biometric and / or other identification information functions.

[0167] In some embodiments, AFSDs (e.g., using their RIIPUs) may require more processing power than NIIPUs, for example, for anomaly analysis, supporting pattern and / or statistical analysis functions, filtering algorithms, and / or more complex dynamic memory encryption requirements for maintaining information security. In contrast, modular components widely distributed in mobile and IoT devices may have simpler identity management functions that are performed using less expensive, less complex identity processing NIIPU arrangements.

[0168] In some embodiments, this isolated, secure modular component hardware arrangement (which includes, for example, NIIPUs and / or RIIPUs, respectively) can be embedded or inserted into a mobile "parent" (host) smart device, such as a smartphone, laptop, tablet, smartwatch, and / or identification wristband and / or pin / brooch, respectively. This modular component arrangement, at least in part, enables the use of highly secure and reliable identification information of smart device users, and / or owners, and / or other stakeholders (e.g., SubPers and / or CertPers) that is at least partially based on biometrics. This modular component arrangement can enable the processing and use of this set of identification information that is at least partially based on biometrics. In addition, this information can be published and securely associated with resources and / or events / activity instances.

[0169] Such modular components can be included in or include a secure protected processing environment, such as a reinforced PERCos identity firewall and / or cognitive manager, wherein such identity firewall and / or cognitive manager can include AFD and / or RCFD, as discussed herein. Such IF and AM can be used for secure identity-related event / activity management operations, respectively, which, for example, use such identification information that is at least partially based on biometrics. Such identification information can include one or more securely maintained and securely verifiable facts of a security association (e.g., one or more digitally expressed authorities, the respective addresses of the identified individuals, educational and / or professional certificates / degrees, employers and / or employment positions, country of residence, age, gender and / or the like, for example, specified in the form of PERCos valid facts) and / or other specified attributes. Such facts can be verified using their respective security testing methods (e.g., standardized and interoperably interpreted testing methods). Such identification information may also include assertions expressed in a standardized and interoperably interpretable quantitative form (e.g., a number, binary (yes / no), and / or similar discrete valued expression), wherein such expressions assert one or more qualities associated with at least partial near-presence or quality of presence of a corresponding individual with respect to a biometric identification for one or more specified purposes. In some embodiments, such assertions and facts may be incorporated into and / or otherwise securely bound to one or more sets of at least partially carried and contemporaneously acquired biometric-based identification information of, for example, an owner and / or user of a receiving, carrying, and forwarding device (RCFD or other applicable RD) arrangement. Such modular components may include any set of NIIPU and / or RIIPU feature sets, and may include, for example, one or more security-hardened identity firewalls and / or awareness managers. In some embodiments, such secure component hardware arrangements may support very low-effort and / or transparent (e.g., low user friction or no friction, depending on the context) provisioning of at least partially contemporaneously acquired (most recently acquired and prior to use, concurrently with operational use) at least partially biometric-based identification information to respective owners, other stakeholders, users, and / or attestors of the devices.

[0170] In some embodiments, a parent device hosts an isolated processing EBInet modular component device arrangement, which may each employ an embedded modular component tamper-resistant, isolated hardware and software processing arrangement. This modular component arrangement constitutes a highly stringent RCFD (Receive, Carry, Use, and Forward Device) arrangement that may employ at least partial proximity and / or quality of presence of an individual, whose identification is based at least in part on biometric identification information. An EBInet parent device arrangement, such as a mobile smartphone, may employ a less stringent local biometric arrangement than the proximity or quality of presence identification EBInet device arrangement. Biometric identification performed by, for example, an EBInet RIIPU modular component arrangement may employ, for example, electromagnetic biometric identification using fingerprints, finger and / or wrist and / or palm and / or hand vascular structure and / or composition, face and / or facial component ID, and / or 3D ultrasonic (ultrasound) recognition of body components, which may each support, for example, heart rate, hemodynamics, and / or impedance, activity detection, and wherein the activity detection information may be securely and inextricably linked to the individual's uniquely identifying biometric data acquired using such technology. Such a biometric identification arrangement can support spoofing resistance, where, for example, electromagnetic signal timing anomaly analysis and / or 3D ultrasound techniques counter photo-based fingertip models and / or similar spoofing methods, and where timing anomaly analysis techniques can be used for liveness detection as described herein, and such techniques can use one or more of spatial, temporal, and / or spectral (e.g., wavelength) analysis, the above at least partially countering virtual / augmented reality and / or highly sophisticated, e.g., prosthetic (e.g., face, fingerprint) based spoofing / spoofing attempts.

[0171] In some embodiments, certain EBInet device arrangements can support an EBInet-compliant virtual ACFD (virtual acquisition, carrier, and forwarding device) arrangement of a host device that uses less stringent, non-near-presence or non-presence quality biometric identification capabilities, such as a non-existent, strict device-local sensor arrangement, to generate a contemporaneous, at least partially biometric-based set of identification information. This EBInet-compliant (e.g., operating on a conventional smartphone) acquisition, carrier, and forwarding virtual arrangement generates an at least partially biometric-based set of identification information that is less stringent than a near-presence or presence quality EBInet biometric-acquired / biometric-based set of identification information.

[0172] In some embodiments, due to commercial and practical product limitations, biometric identification arrangements such as those found on today's smartphones and other mobile devices lack highly stringent performance requirements due to complex design and market-appropriate cost and packaging (e.g., size and / or configuration) considerations. As a result, such devices are unable to produce biometric identification results of near-presence or quality.

[0173] In some embodiments herein, such a mobile device biometric identification arrangement can be used to obtain less stringent results from current devices and then transmit the less stringent results from current devices to a user's respective, isolated, highly tamper-resistant and inspection-resistant, RCFD, RUD, and / or RUS compliant EBInet modular component arrangement. Such an arrangement can use such transmitted biometric identification information as a second factor input based at least in part on biometric identification information for REAI authentication and / or governance, as managed by, for example, an EBInet modular component (e.g., NIIPU) arrangement.

[0174] In some embodiments, the EBInet modular component arrangement enables identity information management and / or fitness for purpose determination in a distributed connected device environment / network that includes, at least in part, an IoT arrangement. Such an arrangement includes, for example, context-dependent (e.g., mobile or fixed) RUD components integrated into security and / or lighting and / or heating (thermostat-controlled) systems, refrigerators (and / or ovens and / or telephone systems), and / or other home and / or work appliances, and / or other home and / or office / work equipment, vehicles and / or components thereof, manufacturing equipment, drones, and / or commercial handling chains and distribution arrangements (e.g., supply chain shipping containers), and / or the like. Such distributed environments each employ tamper-resistant / security-hardened Identity Information Processing Unit (IIPU) components that provide a standardized, highly trusted, permission- and consequence-managed, distributed, secure, at least partially biometric-based identity information operating environment.

[0175] In some embodiments, a secure, isolated processing identity information environment is supported using an EBInet modular component hardware arrangement, and such components can share (e.g., use) at least a portion of one or more capabilities of their respective smart parent devices, such as at least partially sharing and / or otherwise using respective packaging, power (e.g., battery), communication (e.g., antenna and / or networking components), sensors, security (secure enclave), storage (dynamic and / or persistent memory storage space), and / or processing (e.g., protected processing) arrangements and / or portions thereof, and / or the like.

[0176] Some EBInet arrangements can securely communicate identification information through one or more EBInet device and / or service arrangements, where such device and / or service arrangements receive and forward IIS information, and such information can be securely maintained transiently and / or carried / stored more persistently. Such device arrangements can support "hopping" of identification information, where such information is passed through one or more intermediate nodes to one or more RUDs (and / or RUS service arrangements), which use such information for event / activity identification and / or associated governance processes. Such information set hopping and associated event / activity information can securely become part of, or otherwise be securely cryptographically associated with, an IIS sequence, as it can include (directly and / or by reference) provenance information that includes relevant information regarding the location of steps in an IIS sequence instance and other attributes, such as biometric-based identification information for the participating individuals. In some embodiments, such information provides device history path information—which can be provided using EBInet (a) composite converged identity information sets (CIIS); and / or (b) discrete, individually provided device and / or service deployment information sets—securely associated with stakeholder and / or user (SubPer) and / or certifier (CertPer) IIS information sets (e.g., CBEIIS). This "pass-through" process sequence and associated related REAI identity information can include provenance information (e.g., in the form of an EBIBlockChain including the corresponding EBIBlock of such chain), which can be transmitted to an organization and / or cloud information management service, such as an EBInet identity information utility, and can be used by management parties and / or end-user parties to evaluate REAI. This pass-through device and / or service deployment can each employ an EBInet modular component deployment, such as a NIIPU (and / or RIIPU) deployment.

[0177] Reliably establishing the identity of human actors is an essential component of achieving a secure, usability- and rights-managed, secure, and performance-optimized universe of interconnected computing resources and / or event / activity instances. Identification information based at least in part on biometrics of a human actor's near presence or quality of presence, for example, securely combined with relevant provisioning facts, fit-for-purpose quality assertions, and other standardized and interoperably interpretable usability-informing attribute information types, helps ensure (a) the authenticity of REAI, and (b) rights, other policies, and associated management of REAI's usability. This secure combined human actor and device and / or service attribute information arrangement (e.g., CIIS, such as CIIS IIT) can include essential elements in protecting and managing, for example, supply, value and other commerce chains (SVCC) (which may use the EBInet EBIBlock secure blockchain), metaverse virtual or augmented reality arrangements, and / or EBInet digital currency arrangements (which may also use EBIBlock's EBI Coin arrangement), as well as, for example, in ensuring users make secure and appropriate choices about who (and / or what) to interact with and / or who (and / or what) to rely on when participating in online social, business, social (e.g., government-related), affinity, entertainment and / or educational (e.g., knowledge acquisition) networking.

[0178] The secure combination of biometric-based human identification information, which at least partially approximates a person's presence and / or quality of presence, with associated device, service, and / or event / activity descriptive information in a standardized and interoperable interpretable form, provides a basis for analyzing / determining the consequences of REAI usage and / or event / activity participation. This information set provides the operational dimension foundation for a composite human / computing instance identity-informed infrastructure for evaluating / calculating REAI appropriate for user purposes. This combination can lead to greatly improved trustworthiness and other suitability considerations for computing resources—addressing the issues underlying many of today's interconnected computing problems and challenges. These challenges stem from deficiencies in network security, SVCC management, communications network security, digital currency (such as blockchain) implementation, metaverse and NFT management, and social and business networking trustworthiness, all of which are fraught with risks from unreliable identities. Secure and efficient computing requires a new type of integrated, standardized, interoperably interpretable, and distributed personal identity information system that identifies computing activity participants and / or associated stakeholders / users / CertPers locally (and / or in some embodiments, near locally), that is, substantially reliably, and uses identification information (or information derived at least in part therefrom) as a biometric-based identity anchor (biometric attribute) securely bound to a "root" of corresponding participant descriptive (non-biometric) attributes. Such attributes provide information dimensions for computing and / or otherwise assessing suitability, including, for example, the trustworthiness of REAI and / or the effectiveness of achieving user purposes. Such attributes can be combined with other REAI attributes for corresponding device, service, and event / activity instances. REAI attributes can include, for example, a unique identifier for each such instance (e.g., embedded secrets including, for example, the instance's respective private key) and a set of information about fit-for-purpose quality and validity facts.

[0179] The use of "presence" and its grammatical variants herein with reference to a person-specific biometric identification system means that such a system produces a "presence-reliable" set of identification information, wherein no known set of techniques can undermine the accuracy of such system's presence-determined person-specific identity (such accuracy distinguishing a specific person from all other specific persons with effective (practical) certainty) under actual usage conditions / contexts. Such presence-reliable person-specific identification precludes the feasibility of successful spoofing and may involve one or more anti-spoofing techniques, wherein such techniques include, for example, live person verification (e.g., using electromagnetic transmitter and sensor signal timing anomaly analysis) and / or identifying at least a portion of a spoofing arrangement (e.g., a virtual reality spoof transmitter set).

[0180] In some embodiments described herein, and without limitation, an EBInet identity information set may include and / or otherwise be securely associated with readily interpretable and standardized (a) purpose expressions and quantitative values ​​associated with suitability (e.g., PERCos fit-for-purpose quality (cred)), (b) testable facts (e.g., PERCos valid facts), (c) authority and / or purpose management, and / or (d) security policies, information sets specific to humans and / or groups of humans. As described in the embodiments herein, such a system provides identity-related information based at least in part on biometrics in an efficient, user-friendly, and cost-effective manner for identifying and / or assessing suitability (e.g., including authorization) for computing-related activities associated with specifically identified humans and / or groups of humans, and / or otherwise supporting computing-related activities associated with specifically identified humans and / or groups of humans.

[0181] Presence (or near presence) reliable identification / authentication of computing activities requires the use of advanced biometric recognition technologies, such as those described herein. Reliable identification of the presence of humans and / or actions resulting from participation in computing activities—such as joining a social network session, or creating a stakeholder computing activity work product (e.g., creating a computing activity stakeholder product resource such as a software program, document, or email)—can lead to a reduction in privacy of computing activities and supplement the rapidly accumulating large datasets that map corresponding human activity patterns, as well as predict such humans' corresponding potential situational responses (e.g., responses to advertisements). While this has led to the use and some abuse of this specific human information in attempts to shape individuals' future behavior, including, for example, social attempts to undermine human individuality, and commercial attempts to encourage specific commercial behavior (e.g., purchasing certain products), the widespread use of biometric identification is an emerging reality and, if delivered with a quality close to presence or presence, can provide considerable value when implemented using an EBInet arrangement that informs about, for example, REAI applicability, including trustworthiness, reliability, efficiency, productivity, etc. Biometrics, and in particular liveness-verified, presence-quality biometrics, offer numerous advantages over passwords and multi-factor device identity arrangements. EBInet embodiments can support and substantially extend efficient, secure, and user-friendly human control in the emerging interconnected computing universe, as well as provide non-socially identified, at least partially anonymous REAI identity information.

[0182] In some embodiments described herein, root personal identification information of a partially biometrically based identity information set approximating presence and / or quality of presence is (1) secure and cryptographically protected, (2) can be anonymous with respect to social identification information (e.g., no street address, name, social security number is provided), and (3) is securely tied to one or more descriptive but non-specific personal identification attributes of the identification information set (e.g., cryptographically hashed in conjunction with the aforementioned attributes), such as Cred and / or EF. This arrangement of information supports, for example, securely and reliably providing suitability-informed personal characterization information (such as providing verifiable provisions regarding one or more affinity group memberships, professional certifications and / or memberships (e.g., certified plumber, doctor, professional actor), age and / or approximate physical location, income and / or educational attainment) without employing and / or revealing and / or otherwise providing "real-world" specific personal identification and / or privacy-disclosing information instances or aggregations.

[0183] Effectively eliminating identity misrepresentation and providing suitability-informed attributes of identity-associated parties, including providing secure and flexible, standardized, and interoperable arrangements of identity information based at least in part on biometrics, can significantly improve the efficiency and productivity of modern computing, as well as the integrity / trustworthiness of computing resources and sets of event / activity instances. As described herein, such capabilities can support more reliable, practical, cost-effective, and frictionless use of identity information management for computing event / activity participants (e.g., using contemporaneous near-presence or presence-quality biometric acquisition and subsequent transparent or targeted use).

[0184] The EBInet system can solve or improve serious problems caused by today's major first-generation interconnected computing architectures, which lack systems that support close presence and / or presence of reliable identifiers and standardized and easily interpretable human and other resources and event / activity instances, and corresponding applicability-informed attributes, resulting in interconnected computing:

[0185] 1. Inefficient and inadequate results of personal and business computing activities / work products,

[0186] 2. Insufficient support for business value chain activities (such as value chain serialization management),

[0187] 3. Exposure to financial losses (and other financial uncertainties) resulting from cryptocurrency theft, or loss of keys resulting from the use of traditional blockchain technology,

[0188] 4. Financial losses and / or other financial consequences resulting from insufficiently reliable identification of REAI stakeholders / participants.

[0189] 5. Inadequate identity integrity assurance leads to reputational uncertainty, risk, and consequences due to the misuse / misappropriation of an individual’s corresponding identifying information.

[0190] 6. Unnecessary user overhead requirements when performing biometric identification activities,

[0191] 7. Threats to personal data privacy, including the inability to appropriately balance the interests of interconnected computing participants through the use of anonymized root biometric identities, securely bound to information that characterizes but does not specifically identify socially identified participants.

[0192] 8. The inability to efficiently, securely, and effectively explore and exploit social and business networking opportunities, including providing inadequate information about the identities of participants in social and business networking activities and resulting in uninformed interactions with other connected computing parties,

[0193] 9. Inadequate cybersecurity protection against threats due to a lack of reliable identifying information about resources and / or events / activities, instances (e.g., lack of reliability of secure binding of human identity and other attributes to the presence or quality of existence, failure to identify objects infected / damaged by viruses and / or other malware, such as infected software code, emails, web pages, and documents),

[0194] 10. Misdirection (such as to a fake cell tower) and / or eavesdropping and / or other interference with communications such as cellular telephone calls,

[0195] 11. Instances of misidentified and / or misleading resources and / or events / activities, leading, for example, to the malicious counterfeiting of tangible goods (e.g., food, pharmaceuticals, electronic components), and inadequate and inefficient controls over supply, value, and other commercial chain arrangements,

[0196] 12. Expensive and complex implementation of digital copies and information verification,

[0197] 13. False information (e.g. fake news) and / or other disreputable content, including unreliable / untrustworthy and / or maliciously modified information sets,

[0198] 14. The lack of standardized and interoperably interpretable REAI provenance arrangements that employ biometric-based identification information that approximates at least some presence or quality of presence of stakeholders, providers, users, and attestors, and

[0199] 15. Failure to provide users with standardized and interoperably interpretable means to characterize and associate computing deployment purposes as personal and / or organizationally relevant attributes, and where inadequate information and / or erroneous information sets can be eliminated and / or mitigated based on the provision and / or creation / modification of the appropriate standardized attributes of the information sets of one or more parties.

[0200] The foundation of human trust and understanding is fundamentally based on the perception of another person's (and / or group's) intentions, trustworthiness, authority, capabilities, and / or other appropriate attributes. In a computing context, understanding the appropriateness (suitability) of a person and / or a resource and / or event / activity instance associated with a person depends on the user's / participant's ability to identify and contextually assess one or more closely related attributes of the other party associated with a reliable, person-specific identifier. For the sake of trustworthiness, such closely related attributes should be anchored to a fundamental, substantially reliable human identifier. Such suitability considerations can be perceived at least in part as attributes that are generally representative (e.g., trustworthiness) and / or contextually / contextually relevant (e.g., capability / usefulness associated with one or more specified user purposes) and / or assessed using such attributes. Determining identifying information about who is "backing" and / or otherwise associated with a resource and / or event / activity instance can be crucial to the reliability, security, efficiency, productivity, and effectiveness of human computing.

[0201] In the case of various EBInet embodiments, resource and event / activity identification information instances are anchored to their biometric-based identification information sets of potentially associated persons, and in particular, to the presence quality biometric identification information of the corresponding SubPer (stakeholder, owner, agent and / or user) and / or CertPer (certifier) ​​of one or more instances. Such biometric-based identification information can be securely bound to and / or securely otherwise associated with (including, for example, integrated into) closely related person-specific computational suitability-informing information attributes, such as PERCos testable / certifiable valid facts, quantified fitness-for-purpose quality assertions and / or contextual purpose specifications.

[0202] In some embodiments, for example, EBInet supports obtaining identification information of an individual with biometric accuracy and specifying one or more attributes of such individual by cryptographically binding such attributes to an identity anchor, the identity anchor comprising at least a portion of the biometrically accurate or nearly accurate identification information. Such highly accurate identity anchor information is crucial for ensuring secure computing over a network and / or otherwise determining the context-specific (or general) appropriateness of computing resources (e.g., programs, documents, emails, texts, tweets, web pages, devices, and / or individuals). For example, in many cases, it is essential that the human-specific identities of one or more "backup" stakeholders, such as the provider / sender of an email or email attachment, are substantially reliable. Such identification information of one or more individuals can then be used to generate and publish (and / or otherwise use) a contemporaneous (acquired near the time of use) set of resource and / or event / activity instance identification information, for example using a biometric identification AFSD arrangement (acquisition and forwarding station). This near presence or quality of presence using a contemporaneous biometric identification acquisition arrangement enables near presence or presence reliable identification information acquisition without the expense and user overhead of duplicate, operationally concurrent information acquisition (e.g., using a biometric acquisition device arrangement embedded in a personal computing mobile device). Such information can then be economically and practically used, for example, to form resource and / or event / activity instance identification information sets for use in computing identification and / or authorization purposes.

[0203] The EBInet arrangement supports the use of biometric information related to proximity and / or quality of presence in identifying and using resources and / or stakeholders associated with event / activity instances. This support enables the provision of secure and user-purpose-informed attribute information. This attribute information can directly characterize the corresponding subject of a REAI (including the corresponding human being that comprises such a REAI), and / or can characterize stakeholders and / or attestors associated with the subject. As a result of using proximity and quality of presence identification techniques, in some embodiments, the EBInet arrangement provides respective root, unique, and / or otherwise uniquely distinguishable identifiers. For example, such identifiers can be cryptographically bound to anchored personal identification information used in attesting and authenticating respective REAI attributes, thereby enabling a secure, cryptographically partially human-identifiable ecosystem of identity tokens (and / or similar secure instance information sets). This binding can associate human-specific identifier information based on biometric proximity and / or quality of presence with information specific to such identifiers and / or more generally characterizing (e.g., regarding category / class) that is useful in determining instance suitability / suitability. Such an EBInet arrangement may, for example, include a highly secure association of one or more of credibility, competence (e.g., using credentials), and / or rules and control related attributes (e.g., digital rights management, such as authorizations, attributes, other policy information attributes, and associated security management / implementation specifications) with root personal identification information (e.g., using quality of presence biometrics). In some embodiments, such information and implementation capabilities include providing rules and control management (such as provenance management) and rights management capabilities for auditing. Such capabilities can ensure the integrity of computing activities, including enabling, for example, more reliable serialization (supply, value, and / or other business chain) management, more secure and reliable social networking, optimized computing resource identification and evaluation, trusted communications, substantially more secure and reliable digital currency implementations, and / or much more reliable network security protections.

[0204] It is impractical to commercially implement reliable biometric identification acquisition capabilities across a wide range of highly mobile device types, such as smartphones, smartwatches, smart wristbands, smart pendants, smart continuous wristbands, and / or the like. For example, it would be economically impractical to redundantly integrate such reliable presence capabilities across a user's various non-mobile computer and computer management arrangements, such as, for example, integrating a separate computing arrangement within each of a user and / or one or more groups of users, such as (a) a mobile computing device, (b) a desktop computer, (c) an IoT instance and a custom digital communication interconnected device arrangement, and (d) a computer management arrangement shared by manufacturing, supply, value chain, and / or other groups. EBInet arrangements employ near-presence and / or contemporaneous biometric identification information acquisition and forwarding stations that acquire and can communicate, at least in part, biometric identification information to associated EBInet device arrangements that receive, use, carry, and / or forward. Such stations can directly and securely forward, for example, updated biometric identification information of individual stakeholders, which can be used and / or requested by other EBInet-compliant device arrangements. In some embodiments, such forwarding of identification information may be dictated by security-enforced policies.

[0205] In some embodiments, using rights management, individual permissions associated with digital operations can be enforced by ensuring that such individuals have actual or operationally current consent to electronic contractual obligations (e.g., smart contracts implemented by executable code) and / or other commitments to allow the execution of a digitally executed set of processes, where a contract or other agreement clause requires operationally current, direct, and explicit consent (e.g., a yes or no response) from such individuals, for example, using a trusted path user interface instruction arrangement. For example, such consent (or refusal to proceed with such set of processes) may require making available contemporaneous biometric identification information of at least partial proximity or quality of presence carried by such individuals, and matching such information with anonymous or socially identifiable biometric identification information of the individuals. Such information may be carried within an instance of rules and control information associated with a transaction (e.g., a digital contract), such as within a set of information in a digital currency blockchain, such as within an EBICoin sequence (e.g., EBIBlockChain) arrangement, and / or registered with a matching service. In some embodiments, provision of such identification information may require accompanying user-initiated trusted path instructions to complete one or more digital contract clauses.

[0206] EBICoin is a form of digital currency that includes securely managed instances of personal / digital coin identification information. In some embodiments, EBICoin securely specifies / provides for:

[0207] (a) unique identifier information for one or more digital coins that they contain and / or are securely associated with, minted or mined, and issued, where such information may include and / or be securely associated with the date, time, and / or location at which such digital coins were minted or minted and issued,

[0208] (b) the financial value (e.g., denomination) of the minted or minted and issued digital coins that it contains and / or the security is associated with, and

[0209] (c) biometric-based identification information containing and / or securely associated at least partial proximity of the presence or quality of the presence of one or more current human owners and / or owner human agents of its digital coins,

[0210] And can further specify / prescribe:

[0211] (d) biometric-based identification information containing and / or securely associated at least partial proximity or quality of presence of one or more minters, miners and / or issuers of its digital coins and / or their human agents (such as agents of various financial institutions),

[0212] (e) identification information of the financial institution EBICoin / digital coin transfer service provider that issues new EBICoin(s) that securely specify new digital coin ownership information using identification information based at least in part on biometrics and that replaces the expired / terminated EBICoin(s), and / or

[0213] (f) such EBICoin and / or digital coin certification / cryptographic signature information securely contained / associated with each EBICoin, such certification / signature being performed by such minter, miner, issuer and / or owner party, wherein such certification / signature may be performed by one or more individuals and / or their agents, and wherein such certification / signature may be performed using the respective EBICerts of such individuals and / or agents.

[0214] An EBICoin, for example, in the form of an EBIbox, is used to store financial value owned by a party and facilitate value transfers to complete financial transactions. During a transaction, an EBICoin set is converted to a new EBICoin set to reflect one or more changes in ownership of the underlying, issued, and persistent digital coin or coins. For example, during the completion of a transaction (such as the purchase of an item), an EBICoin set X is converted to an EBICoin set Y to represent the transaction's digital coin set transfer, wherein a set of minted or mined digital coins (which may have been digitally signed by the minter or miner, or other issuing party, using an EBICert and / or other certificate) is transferred from the buyer to the item seller, and wherein a securely maintained set of event / activity specifications / policies (e.g., securely enforced by a digital contract) is required to move the buyer's digital coin set from EBICoin X to the item seller's new EBICoin Y. Such an EBICoin sequence reflects the beginning and end of the transaction's change in digital coin ownership.

[0215] For example, by transferring ownership of one or more uniquely identified digital coins of such an EBICoin to a recipient, the owner of such an EBICoin can use the EBICoin collection to facilitate / complete financial transactions. In such an arrangement, such an EBICoin contains a representation of the subject EBICoin owner or owner proxy, which includes at least a partially near-existing or present set of biometric identification information. Such an EBICoin's "contained" digital coins can be cryptographically digitally signed by a human (e.g., by a human proxy of the issuer using EBICert) of its issuer (e.g., a sovereign's central bank or other issuing institution), whereby the EBICoin effectively constitutes a "parent" digital coin (a coin arrangement containing the collection of digital coins) that explicitly specifies the owner of such parent coin, e.g., cryptographically digitally signed by such owner or owner proxy (e.g., using EBICert). Such an EBICoin also contains (or, in some embodiments, securely references) such issuer's cryptographically signed one or more digital coins.

[0216] Such EBICoin-related signatures can be performed using EBICert, where each EBICoin can contain at least two signature certificates: one signed by the issuer of the digital coin (whose agent signs the digital coins issued by the issuer) and one signed by the owner of the EBICoin, where the owner or the owner's agent signs the EBICoin containing the issuer-signed digital coin (at least in part biometrically). The owner-signed EBICoin becomes invalid upon / after the completion of a financial transaction using the EBICoin. Due to the continued existence of one or more of the issuer-signed and issued digital coins "carrying" the EBICoin contained in one or more new EBICoins, the new EBICoin is owned by the digital coin recipient. The original EBICoin owner's digital coin or coins can be retained by the owner in the form of new EBICoin or coins, which represent change provided to the owner and still owned by the original EBICoin owner, where the one or more digital coins constitute residual value—change from the digital currency used in the transaction.

[0217] For cryptocurrencies, digital currency rights management has proven to be a daunting challenge. Stolen passwords, lost currency wallets, compromised exchange networks, and malicious digital contract code have caused significant harm to many digital currency users. It has been estimated that up to 20% of all Bitcoins may be irretrievably lost (The New York Times, January 14, 2021, and estimates by CoinDesk and Bankrate, using information provided by Chainalysis). By ensuring valid ownership of digital currency and related computing events / activities (such as digital contracts and management), the use of EBInet deployment capabilities (such as the ability to identify parties who own and / or transfer currency using near-presence or quality-of-presence biometric identification information) can significantly reduce digital currency-related fraud and theft in operationally anonymous or operationally socially identifiable implementations.

[0218] In cases where the NIIPU and / or other PPE require explicit user assertion / acceptance of transactional processes (e.g., approval of smart contract terms), such as the movement of digital currency and / or transfer of rights, enforcement of user rights (e.g., rights to digital currency) can be performed at least partially on such user's RCFD—such process management may alternatively or additionally be required by a cryptocurrency exchange platform (such as Coinbase). Biometric identification technology employed in such rights management models may additionally or alternatively employ identification information that is operatively captured in real time, such as local smart device and / or RIIPU biometric identification capabilities. The assertion / acceptance requirements for enforcing rules governing one or more transaction or other event / activity control processes may also apply to recipients, such as recipients and / or movers of cryptocurrency, where the recipients and / or movers are required to be biometrically identified and, for example, physically or contemporaneously "present" for the applicable transaction or other event / activity to be completed, and where such currency recipients and / or payers / transferers must provide their approval, for example, by providing signed trusted path instructions (e.g., using EBICert) that result in a set of transaction event / activity information. This information set can be stored and transmitted in a cryptographic blockchain such as EBIBlockChain. In some embodiments, the sender, transferor, and / or recipient of digital currency in a transaction can also sign (and may be required to sign) the transfer of cryptographic blocks involving EBIBlockChain events / activity.

[0219] In some embodiments, an EBICoin, EBICoin X, and / or the social and / or biometric owner identification information of such an EBICoin can be deleted upon (e.g., operably concurrently with) a value exchange and / or other secure value transfer transaction in which ownership of at least a portion of the digital coin collection of EBICoin X is transferred to a new receiving party. Upon completion of such a transaction, one or more digital coins securely contained and / or otherwise securely associated with at least a portion of the digital coin collection of such EBICoin X are now owned by the new receiving party. Such receiving party receives a new EBICoin, such as EBICoin Y, containing the transferred digital coin collection. Such new EBICoin at least partially securely includes and / or otherwise securely references a set of biometric identification information that at least partially approximates the presence or quality of the presence of a human individual or agent of the new owner of such digital coin collection, such set of identification information defining the identity of the new owner of such digital coin collection. At or contemporaneously with the transfer of such value transaction and the creation of such new EBICoin, and upon execution of a set of security policy instructions, or through direct instruction by the individual or individual agent of the original owner of the EBICoin (EBICoin X) transferor, such instruction including providing at least some (or all) of the at least partially biometric identification information of the owner of such EBICoin X, such biometric identification information and / or other such transaction-related information (as specified) is securely and persistently deleted such that, after such transaction is completed, any maintained EBICoin X-related state and / or event / activity information is not included, thus ensuring the anonymity of the identity of the transferor of such EBICoin X moving forward. Furthermore, such identification information of the transferor / previous set of owners of such digital coin set may be deleted from any identification information storage arrangements, including, for example, from local EBInet devices (e.g., NIIPUs and / or RIIPUs) and / or service arrangement storage, owner-related RUS-managed storage based on the organization's network, and / or from the EBICoin X TIIRS registration information storage, through securely implemented policies and / or instructions directed by such past owners. Such storage deletes (and / or alternatively, other anonymity controls, such as locking (e.g., encrypting and / or otherwise securely storing) social identification information in a manner that is inaccessible to parties other than the owner of EBICoin X) and is, for example, only available to the owner of EBICoin X upon secure (e.g., trusted path) presentation of biometric-based identification information of the near presence or quality of presence of such owner or applicable owner agent in accordance with EBInet arrangements.

[0220] In some embodiments, an EBInet arrangement, including, for example, pervasive biometric ID environment (pBIDE) capabilities, provides substantially more reliable, practical, cost-effective, and improved integrity and suitability for user benefit management of resources and / or event / activity instances. This improvement is achieved, at least in part, by using biometric-based proximity and / or quality-of-presence stakeholder identification, liveness, and authentication technologies, as well as securely associating and maintaining individual-specific and user-related attributes. This REAI broadly encompasses various types of computing activity considerations, including, for example: network security management; social and / or business networking; supply, value, and / or other business chain monitoring and governance; IoT and other device deployment operations; communication trustworthiness of digital currencies; and news and document authenticity. This EBInet arrangement enables identification, evaluation, and / or other determination of the appropriateness (e.g., trustworthiness, other suitability) and / or authorization of a set of computing activity resources and / or event / activity instances. In some embodiments, this identification, evaluation, and / or other determination of appropriateness and / or authorization is performed and / or otherwise supported by EBInet-compliant local network and / or cloud (e.g., Internet)-related services. Such EBInet device arrangements may communicate with each other, and / or one or more such EBInet device arrangements may communicate with remote management, utility, and / or platform arrangements, e.g., for performing auditing, rights management, and / or other attribute and / or policy, information updates, and / or for performing at least in part attribute-related resource and / or event / activity instance management. Such management may include redundantly and operatively performing operations simultaneously in different locations (e.g., across network locations) to ensure the integrity of such operations, e.g., by producing identical or consistent results according to specifications.

[0221] The EBInet identity information set is particularly useful in managing (including avoiding) cybersecurity threats and communication protection challenges. These threats and challenges include significant risk factors that threaten the infrastructure and operations of modern civilization (including commercial, personal, and societal interests and assets). Because cybersecurity malware activities are primarily carried out (e.g., initiated) remotely from the physical location of the compromised party, the practical reality of the EBInet contemporaneous time period (e.g., one day) means that bad actors other than smart device thieves who might steal the device will not have the opportunity to compromise the device and exploit stored (or carried) biometric-based identification information, as such thieves will have a very limited time window to use such information (policy-managed contemporaneous identification information will time out (e.g., expire) and need to be refreshed). Because physical control / theft of personal computing devices is not a primary source of cybersecurity attacks, the contemporaneous near-presence or presence-quality acquisition of biometric identification information for subsequent authentication of an individual's identity, and the binding of such identity to resource and / or event / activity instance information sets, can in most cases provide superior cost, packaging, user-friendliness, practical flexibility, mobility, and security performance compared to comparable quality of biometric information acquisition and use of identity information simultaneously.

[0222] Malicious cybersecurity attacks are fundamentally, at least initially, almost entirely caused by the actions of a remotely located party. Because cybersecurity attacks are typically carried out by hackers using specialized tools and skills (rather than the common tools and / or skills of a street thief stealing a phone), for various reasons, physical theft of a smart mobile device generally does not result in a cybersecurity breach. In particular, from a cybersecurity perspective, providing identification information about a user's proximity or quality of presence (e.g., a liveness assessment) contemporaneously (e.g., during the same day or a shorter period of time) can provide the same biometric identification benefits as performing such a substantially reliable biometric identification process operatively concurrently with computing activity. Consequently, physical theft of an EBInet (or other) identification information-bearing and provisioning device rarely results in a substantial, identity-related cybersecurity threat (relative to a local physical access device deployment). For example, in some embodiments, a stolen EBInet RCFD—e.g., an EBInet-compliant smartphone (or other smart device)—can be protected, at least in part, by utilizing its inherent, non-existent biometric identification capability set. Such a set of capabilities can have sufficient stringency and associated technical and device complexity to prevent thieves (as opposed to highly sophisticated black hat hackers) from misusing user and / or owner identification information carried by RCFD devices within the limited sunset / refresh specified requirements (e.g., the remaining hours in a day period) of a contemporaneous identity refresh policy set for such devices managed, for example, by an embedded, secure, isolated modular component arrangement of RCFD mobile devices arranged by EBInet (e.g., a NIIPU arrangement).

[0223] In some embodiments, an EBInet device arrangement includes a tamper-resistant, networked device arrangement for securely acquiring and contemporaneously (relative to simultaneously) using one or more at least partially biometric near-presence or quality-of-presence human identification information sets, which in many embodiments are tied to corresponding, securely acquired acquisition times and locations and associated acquisition device information. Such human identification information sets can be acquired using a tamper-resistant, secure identity information acquisition and forwarding station device arrangement employing a corresponding RIIPU arrangement. Such biometric information and / or information derived therefrom can then be forwarded to one or more receiving EBInet device arrangements for carrying, using, and / or further processing of the identification information associated with the human computing activity for one or more purposes. Such a receiving device arrangement may use and / or carry such biometric identification information (e.g., with other related identification information), and / or information derived at least in part therefrom, and / or may forward such information to one or more further EBInet device arrangements, where such information may be used as input information for (a) authorizing one or more instances of an event / activity, and / or (b) generating a set of identification information based at least in part on a biometric that is securely published (and used transiently and / or maintained persistently) for identification, assessment, auditing and / or other management and / or operation of computing resources and / or a set of event / activity instances.

[0224] The EBInet contemporaneous provision of a set of at least partially biometrically based identification information for a specific human individual occurs subsequent to (as opposed to operatively concurrently with) the corresponding set of biometric identification acquisition processes for the identified individual. This contemporaneous provision and use of such identification information allows for higher quality, more reliable identification information of human computing activities to be used for resource and / or event / activity instance set identification, assessment, audit, authorization, and / or other management and / or operation. A biometric-based identification information acquisition "station" can be used to generate such identification information concurrently with its use, freeing performance from the same design considerations associated with mobile device packaging, cost, power consumption, sensor placement, and redundancy (e.g., operationally concurrent acquisition needs to be implemented in each or multiple user computing device arrangements). Consequently, such an EBInet arrangement acquisition station, such as one implemented using a corresponding RIIPU, can employ advanced and highly innovative techniques to ensure the reliability of the generated human-specific identification information, thereby enabling secure (e.g., encrypted) association of such highly reliable identity information with user-specific attribute information (e.g., including, for example, information characterizing the individual and / or their respective group of individuals, authority management, expertise, expertise / competence, trustworthiness, and / or similar information) in relation to the user's suitability for the identity.

[0225] The use of acquisition and forwarding "station" devices (AFSDs) (which can be supplemented by the use of AFD distributed and dedicated EBInet acquisition devices) can significantly improve the practicality of providing near-presence or presence-quality biometric identification capabilities by enabling non-redundant or less redundant use of AFD capabilities, such as by integrating a RIIPU into a smartphone charging station to support parent smartphone RCFD implementation (e.g., used once in the morning to acquire (from a usage perspective) biometric identification information contemporaneously with picking up the smartphone at the beginning of the day), and foregoing the need to implement AFD capabilities in the ubiquitous smart devices that permeate modern life, such as smartphones, tablets, watches, laptops, and / or the like. For example, such an implementation of an AFSD biometric identification station can support higher quality biometric identification performance and be designed not only for secure software upgrades, but also to support removable RIIPUs and / or other EBInet-compliant modular component arrangements (e.g., NIIPUs) that can be easily "unplugged" or otherwise conveniently removed for security and / or other performance upgrades and / or security implementation purposes.

[0226] In some embodiments, providing biometric-based identification information concurrent with EBInet provides, at least in part, an information set for securely publishing computing activity resource and / or event / activity instance identification information sets by corresponding stakeholder publishers. For example, such information sets are published to support the availability of such respective information sets for subsequent use by other parties who desire to be informed of who is attesting to and / or otherwise "backing up" and / or otherwise associated with a given resource set instance. Such identification information sets, based at least in part on biometrics, can be used for a short period of time, for example, as identification information sets for a set of communication processes between parties, where such information can inform one or more digital interacting parties of who is participating in and / or attesting to and / or otherwise backing up the communication and / or access control process and / or one or more other REAIs. This REAI's at least partially biometric-based identity information release provides an instance set characterization information set for informing one or more parties involved in an event / activity to identify, evaluate, receive, use and / or verify the credibility, competence and / or other suitability of other parties regarding (a) computing resource instances, (b) computing authority management process sets (e.g., access control), (c) communication (e.g., protocols, paths) process related sets, and / or (d) event / activity set participation and / or other involvement.

[0227] In some embodiments, the EBInet arrangement's corresponding use of such biometric-based identification information sets is time-limited "contemporaneous," and / or may be otherwise based on user / owner instruction, e.g., due to events such as device theft (and / or, e.g., breach of a continuity tethering arrangement), where such identification information is trusted to be sufficiently current for one or more purposes of the user and / or user organization, and where implementation cost rigor, cost, packaging, mobility, power consumption, sensor placement, and / or redundancy are burdensome in making real-time (e.g., operationally concurrent with associated computing activity events) highly rigorous (near-presence or quality-of-presence) biometric identity determination impractical.

[0228] The use of currently available, operational, and concurrent biometric identity-based information (using today's substantially less-than-presence-quality biometric identification implementations) has severe current and anticipated vulnerabilities to identity discrimination accuracy and spoofing. Given the impracticality of achieving near-presence- or presence-quality biometric identification across a range of mobile and fixed devices and environments, there is greater, if not substantially greater, practical value in determining stakeholder and / or other user identities using a single installed, contemporaneous (previously acquired), and more reliable (than current methods) near-presence- or presence-quality biometric identification information acquisition station in most network security environments and many social networks / social venues.

[0229] In some embodiments, particularly in cybersecurity-related and manufacturing, supply, value, and / or other business chain management applications, where malicious organizations and rogue governments may support well-funded, well-equipped laboratories that can perform very sophisticated identity deception, any substantial exposure to FRR (false rejection rate) and any particularly high exposure to FAR (false acceptance rate) are unacceptable. The use of presence biometric identification acquisition stations (whether fixed-location or portable) and the concurrent use of presence identities acquired by the stations may be essential to achieving and maintaining the integrity of cybersecurity (and / or supply, value, and / or other business chain) identification information infrastructure. Accurate human individual identity acquisition and time-limited confirmation of such individual's living presence (e.g., biometric liveness testing) are critical to ensuring that identities associated with resources and / or sets of event / activity instances are indisputably accurate. As the use of biometric identification / acquisition technology is increasingly deployed and biometric identification database information is compromised, the need for indisputably accurate / confidential personal identification arrangements becomes increasingly important.

[0230] In some embodiments, when combined with the relatively robust, but not near-presence or presence reliable, biometric identification and authentication capabilities built into certain modern portable and desktop devices (including desktop computers, smartphones, tablets, laptops, etc.), EBInet's contemporaneous provision of near-presence or presence reliable human-specific identification information enables EBInet's contemporaneous presence identification capabilities and the inherent non-presence biometric information capabilities of such devices to function as a supplementary arrangement, providing, for example, additional factor input in managing network security threats and serving as one or more factors in additional biometric analysis for controlling threats involving local, physically present bad actor device theft and / or other bad actor physical presence and device misuse.

[0231] In some embodiments, after, for example, an initial AFSD user biometric identification information acquisition of a day, one or more AFDs may be used to acquire more recent biometric identification information that approximates presence or quality of presence. This additional AFD biometric identification information acquisition may then be forwarded as contemporaneous information for use by the RCFD and / or used to verify / authenticate at least a portion of the contemporaneous at least partially biometric identification information carried by the RCFD. This verification may ensure that the first acquired biometric identification information operatively matches the more recent AFD acquisition information according to specifications. This additional one or more AFDs may acquire the biometric identification information that approximates presence or quality of presence and, for example, use this information to at least one of: (a) update the AFSD biometric identification information of the user of one or more RCFD arrangements currently carrying (e.g., most recently received / updated) one or more sets of contemporaneous at least partially biometric identification information, and (b) authenticate and / or otherwise verify, for example, one or more instances of contemporaneous at least partially biometric identification information (or one or more portions thereof) carried by one or more RCFD arrangements. Such verification testing may determine whether one or more contemporaneous identification information sets carried by such RCFD arrangement represent one or more persons corresponding to such carried identification information sets. For example, such verification testing may determine whether one or more persons are the same persons represented as carrying, using, and / or possessing an identification information set based at least in part on biometrics, as verified by a sensor arrangement within the field of view of a corresponding mobile RCFD using such sensors, as tested / assessed (e.g., compared to such information stored within and / or accessible to a registry of) the AFD and / or associated management / operational identification information service arrangement.

[0232] In some embodiments, biometric identification information of RCFD users may be captured and associated with "real-world" personal identification information (commercial, social, networking, and / or similar information, such as employment ID# and / or social security identifier, and / or being named as a licensed physician). By analyzing and / or comparing such individual's AFSD's biometrically captured identification information (and subsequently associated attribute information, where, for example, such information combination is registered with an identification information utility and / or other management arrangement), the RIIPU, NIIPU, and / or associated management and / or cloud services and / or other EBInet arrangements may determine that such AFSD-captured information sets each represent the same individual and personal attributes as the contemporaneous, at least partially biometric-based, identification information carried by such RCFD. Such verification testing may be performed by matching at least partially biometric-based identification information of such RCFD with at least partially biometric-based identification information of registered (e.g., with such RCFD and / or organization and / or cloud service arrangement) individuals, for example using a combined partial biometric-based identification information set of the corresponding individuals and devices, wherein such registered and / or similarly stored information sets are stored as registered information sets of respective individuals identifying their users and / or owners, for example, and wherein such sets are stored on respective identification information arrangements of the organization and / or cloud service and / or grouped EBInet devices.

[0233] In some embodiments, one or more AFDs can be employed at a workplace to identify individuals, wherein each or any of such individuals can individually activate a biometric identification process upon entering an organizationally arranged sensor / transmitter arrangement's field of view. For example, such individuals can be individually identified upon entering an organizational building, office arrangement, and / or upon walking through and / or maneuvering within one or more areas of such an organization's AFD-biometrically monitored spaces (e.g., hallways, exterior locations, conference and / or high-security rooms, common areas (e.g., cafeterias), and / or the like). Employees, consultants, and / or other individuals carrying an RCFD (e.g., a pBIDE-enabled RCFD) into such one or more monitored spaces can be identified by one or more area-biometrically monitored AFD arrangements. Such individuals can be identified as being properly registered to carry (or not registered to carry) such a particular RCFD mobile device. Such identification process can include determining whether such individuals, identified by one or more contemporaneous biometric identification information sets carried by such RCFD, are registered to carry a device containing such particular personal identification information and / or are registered to carry a specifically identified, carried device. In such monitored and subsequently evaluated set of processes, such RCFD may receive, send to, and / or exchange with an organizational arrangement AFD and / or management arrangement at least partial biometric identification information sets of one or more such individuals or individual / device combinations from, to, and / or with an organizational arrangement AFD and / or management arrangement. Upon such receipt, a secure PPE arrangement within such RCFD (e.g., NIIPU) and / or such AFD arrangement (e.g., RIIPU) and / or a secure PPE arrangement within a RUD or RUS arrangement may determine whether such received identification information complies with (one or more) management specifications, i.e., whether it sufficiently matches, as required by the corresponding AFD and / or RCFD and / or (one or more) other EBInet management arrangement policy specifications, and may, for example, determine whether the at least partial biometric identification information set carried by such RCFD and generated by the AFD, or one or more portions thereof (e.g., CBEIIS and / or CIIS and / or similar security binding information sets), matches according to such specifications (CBEIIS being a contemporaneous set of identification information for a person based at least in part on biometric proximity or quality of presence).

[0234] Such an AFD and / or associated RUS management arrangement may receive and evaluate at least a portion of the CBEIIS and / or CIIS identification information carried by the RCFD and may take one or more actions based on determining whether such IIS information matches one or more IISs stored internally by the RCFD (such match being securely determined to comply with one or more specifications). Based on such determination, such an AFD and / or associated RUS arrangement may notify an administrative authority (e.g., an identification information registry and / or an event / activity control service) and / or transmit a control instruction (e.g., at least partially disable) to such receiving RCFD. Such actions may be based on such an AFD and / or RUS management entity determining that one or more such sets of biometric identification information currently operatively acquired from such an AFD of such an organizational arrangement are consistent with those carried by such RCFD's biometric contemporaneous IISs, respectively, i.e., that the carried contemporaneous IIS sets are consistent with currently operatively observed and acquired and / or previously registered human presence and / or human / device composite grouping and / or related event / activity information. Such information should be consistent with, i.e., conform to, associated policies regarding stored individual and / or composite identities (e.g., individuals and devices), stored and registered information. Such information can provide a basis for identifying intended and / or authorized (e.g., registered) mobile EBInet arrangement users, such as for implementing rules and controls for user rights management, management monitoring, and / or threat analysis purposes. Such AFD and / or associated network management arrangement(s) (e.g., an organization and / or cloud platform, an identity information management service arrangement) can, in response to a match failure by comparing at least partially biometric-based identification information carried by a user and / or user / device RCFD with a registered and / or other authorized (e.g., acquired through operationally current monitoring) user / individual identification information set, at least partially disable and / or otherwise control (e.g., restrict) the operation of such RCFD and / or a parent mobile device arrangement carrying such compared / evaluated identification information set (e.g., disable and / or otherwise at least partially control functionality of such EBInet arrangement RCFD and / or parent compliant parent device (e.g., a smartphone or other smart mobile device)). Such deactivation and / or otherwise control may include, for example, broadcasting the location of such mobile device, causing a mobile parent device to shut down (power off), causing such parent device arrangement to generate an audible and / or electromagnetic alarm signal, and / or limiting one or more functions of such mobile device arrangement, and / or such device arrangement's RCFD or one or more portions thereof (e.g., its embedded highly secure NIIPU modular component arrangement).The AFD arrangement and / or one or more associated services may, for example, send an instruction to a communicating / corresponding RCFD that does not have at least partially biometric identification information for an authorized and registered matching individual. Such instructions may, at least in part, provide for deactivating and / or otherwise restricting at least a portion of its capabilities and / or interactions with other devices and / or service arrangements (e.g., EBInet-compliant). Such devices and / or service arrangements may be instructed to cease operation and / or notify other device arrangements and / or appropriate network services, administrative individuals, and / or administrative groups of such a failed match based on specification information.

[0235] In some embodiments, an AFD arrangement may forward updated sets of biometric user identification information to corresponding RCFDs to augment and / or replace / refresh biometric user identification information employed in at least a partially biometric user identification information set of a user and / or composite device arrangement. Such information may be used, for example, in one or more pBIDE embodiments. For example, the most recently generated biometric identification information of such an AFD may be used upon receipt, while older (or newer) instances of such information may be retained in a manner consistent with audit history and / or operational performance / compliance / governance (e.g., rights management) analysis and control purposes and / or second (or other) factor identification information authentication specifications.

[0236] In some embodiments, distributed AFDs (such as within a facility arrangement of one or more organizations) can enable the availability of operationally recent or operationally current near-presence or presence-quality biometric identification information without compromising the substantial cost, size / configuration, ease of use / transparency of use, and improved performance of a parent mobile device (or dedicated RCF device). Using a combination of distributed, shared-use, organization / group AFDs to acquire at least some contemporaneous near-presence or presence-quality biometric-based identification information can support substantially higher quality device and / or personal identification information performance in a commercially reasonable configuration.

[0237] In some embodiments, the use of contemporaneous biometric information of near-presence or quality of presence in combination with operationally simultaneous biometric identification information generated by mobile and other portable computing devices can, when properly implemented and used, reduce or eliminate most known computer security threats involving attempts at local device information theft and / or other device misuse.

[0238] In some embodiments, EBInet arrangement can use smart device trusted path capability to perform user confirmation of activity instance, such as authorizing the binding of CBEIIS and / or CIIS carried with IIS information of non-human subject, and this non-human subject is such as document, software code, text message, email, device, event / activity, and / or the like.This confirmation assertion can use trusted path to transmit event / activity proof, such as when user uses isolated, auxiliary trusted path to carry out user action statement / confirmation.This use can for example involve user pressing trusted path action confirmation button or button array, wherein for example different button sets correspond to different actions, such as publishing email and / or email specific type (such as, publishing to friends, security, finance, etc.) that conform to EBInet or save data instance, such as document or software program.Pressing specific one or more buttons in sequence or simultaneously can distinguish data purpose, i.e., for example, distinguishing signature, registration and publishing / sending document from sending email or sending text.In some such embodiments, some or all such buttons can be programmed by device user (such as, programming first button to start employer confidential information signing and publishing / registering, and programming second button to start preparation of personal document). The foregoing may include, for example, a corresponding User CertPer launch button set for publishing a document or other data set to sign such data set with an at least partially contemporaneous and near-existence or quality-of-existence biometric-based EBInet identification information set and / or the like (e.g., using EBICert) of at least a portion of the users.

[0239] In some embodiments, a trusted path instruction arrangement can be physically and securely integrated into a smart device arrangement (e.g., a smartphone or laptop) to perform one or more tamper-resistant trusted path EBInet operations, or such a trusted path arrangement can be a secondary device arrangement wirelessly connected to and / or physically attached to a companion smart device arrangement. Such a trusted path device arrangement can provide an isolated trusted path for initiating and certifying (e.g., using EBICert) one or more EBInet-related operations, such as securely publishing a document and securely establishing an at least partially biometric-based IIS for an associated device / CertPer combination. Such a button arrangement can be programmed to respond to different button press configurations, each corresponding to a different event / activity instance, such as pressing a trusted path button twice to initiate / authorize / confirm sending an email, or pressing the same button using two short presses and a long press to publish the IIS of a resource or securely save a confidential document with its IIS.

[0240] In some embodiments, a trusted path arrangement can prevent a compromised EBInet-compliant smart device or other compliant device arrangement from acquiring and / or using a biometric-based identification information set, e.g., for certifying a resource and / or event / activity identification information set, and / or the like. Such an arrangement can be used to prevent forged signatures (e.g., false certification) and / or other uses (e.g., false authorization) of an EBInet identification information set, such as forged signatures resulting from malicious compromise of an EBInet-compliant device arrangement (e.g., a smart device having an embedded modular component RIIPU) by, for example, one or more remotely delivered bots masquerading as legitimate EBInet registered users, wherein such bots are unable to spoof trusted path activation, physical button activation, or one or more physical button activations.

[0241] In some embodiments, the EBInet arrangement supports the use of contemporaneous sets of identification information based at least in part on biometrics for, for example, respective identification of computing resources and / or sets of event instances, credibility assessment, authenticity and / or other integrity analysis, rights management (e.g., authorizing access to sensitive websites and / or data stores based on usage rights attributes associated with a user identity), and / or managing auditing of EBInet-related events / activities (e.g., provenance management).

[0242] In some embodiments, the set of identification information instances based at least in part on biometrics for each of the EBInet resource and / or event / activity instances supports:

[0243] (1) Evaluation by a user and / or participant of the suitability for and / or management of use of: a computing resource instance (document, email and text, software, web page, database, network, hardware component, appliance, human resources, value chain, digital currency, and / or the like); a process / event instance (such as a set of communication processes, such as communication protocol execution); and / or an activity instance (e.g., online banking, online shopping, physical entrance management, video networking, and / or the like). Such evaluation and / or management may employ, at least in part, a human identifier of human proximity or quality of presence based at least in part on biometrics and respective asserted / specified characteristics of the resource and / or event / activity instance (e.g., quality of fit for a specified purpose, validity facts, contextual purpose expression, and / or the like), wherein, for example, a user's evaluation of the suitability of the REAI is based on a set of operational purposes (where the set is one or more) of the user and / or instance participant;

[0244] (2) At least partially standardized and interoperably interpretable certifications and / or other declarations, assertions and / or provisions regarding the suitability (e.g., usefulness, trustworthiness, compatibility, competence) of an individual human stakeholder's identification information set for their respective set of resources and / or event / activity instances. Such certifications and / or other declarations involve, for example, the individual stakeholder personally endorsing the completeness, authenticity, validity, performance, suitability and / or the like (and / or otherwise associating their identity with respect to the set of attribute information sets of: (a) the corresponding set of content of the identification information set, and / or (b) the corresponding specific subject matter instance of the identified REA instance (e.g., the identified software program, electronic document, website, human "actor" (e.g., expert) and / or device arrangement). In some embodiments, such identification information of such stakeholders may be evaluated as suitability-informed attribute sets for their respective (e.g., associated) REA instances' identification information sets and / or respective subject matter.

[0245] (3) Managing the authorization, use, respective subject (e.g., rights management related) operations and / or participation of resources and / or event / activity instances. For example, such management may be performed by and / or for respective resource users and / or event / activity participants, where such authorization, use and / or participation includes, at least in part, a set of rights, consequences and / or purpose-realization processes.

[0246] EBInet may securely provide at least a portion of a biometrically acquired set of identification information (and / or identification information derived at least in part therefrom) from the AFD during a "contemporaneous" time period of biometric acquisition of such information, where such acquired information may be securely "carried" by the RCFD and, where appropriate, may be arranged by the EBInet device for later contemporaneous (e.g., as policy security specifies) use.

[0247] In some EBInet embodiments, the respective identification, evaluation, and / or management of a set of resource instances by computing activity participants is performed at least in part using standardized and interoperably interpreted subject matter to represent identification information, wherein such information may respectively include:

[0248] (a) one or more sets of subject identification information of a unique instance that can be used to at least partially specify and / or verify the identity of, for example, a hardware instance (at least in part, a hardware resource), and wherein the one or more sets of identification information of a manufacturer of such hardware subject can include unique subject identification information embedded in such hardware, the unique subject identification information comprising at least in part one or more securely maintained secret identification information, and / or

[0249] (b) attributes that inform a user about suitability for a corresponding purpose, wherein such attributes respectively include or are securely bound to (i) one or more identification information sets of such subject instances, (ii) instances of one or more identification information sets for respective resource instance groupings (e.g., where the instances are members of identified categories), and / or (iii) one or more attribute information sets of the subject, such as identification information of a REAI that respectively includes identification information of such subject, such attributes including, for example, identification information of stakeholders (such as authors) and / or providers (such as senders) of a document or email.

[0250] The corresponding attributes of such a set of identification information instances may also, for example, include one or more specified, at least partially standardized and interoperably interpretable (a) approximate expressions (e.g., specifications) of the quality of conformity to purpose (e.g., cred) of the contextual purpose, and / or (b) testable facts (e.g., PERCos valid facts), where such attributes can be used to evaluate the suitability of the subject matter of the corresponding one or more REAI instance sets in satisfying one or more user purpose-related computing functions.

[0251] In some embodiments, an EBInet identification information set may include one or more unique identifiers of the subject of a corresponding resource and / or event / activity instance set, wherein such identification information sets each have one or more securely associated biometric-based personal attestations of near-presence or quality of presence (e.g., using EBICert). Such at least partially biometric-based attestations (and their information content) may be used, at least in part, to attest, otherwise verify, and / or otherwise provide information that verifies and / or otherwise indicates suitability, e.g., through validity, trustworthiness, reliability, relevance, performance, and / or the like, for achieving or otherwise contributing to the respective purpose of the user computing event / activity.

[0252] In some embodiments, each REAI securely includes and / or references one or more sets of identification information. Such sets include a subject-unique identifier, which includes one or more unique descriptors of the corresponding subject of a set of resources and / or event / activity instances, such as a unique, serialized abstract identifier for a corresponding specific copy of a software program, such unique descriptor representing / identifying / linking to the corresponding specific subject instance of the set of resources and / or event / activity. Such identification information sets can securely reference and / or securely include unique project-specific subjects and / or subject instances, identity information such as, for example, a subject model version identifier, and / or a company- and / or model-associated instance-specific serial number, and / or a hardware instance-specific embedded manufacturer-provided unique secret, and / or corresponding information instances securely associated with such secrets, wherein such secrets and / or secret-associated information instances are at least partially merged to uniquely identify different computing resource devices and / or other REAI deployment instances. In some embodiments, such identification information can also, in part, include one or more reputation (e.g., quality of fit for purpose) and / or other contextual purpose and / or testable fact (e.g., PERCos validity fact) project attribute information sets, and / or employ other attribute methods and systems.

[0253] In some embodiments, one or more EBInet project identification information elements, as described herein, can be securely combined with biometric identification information of at least a partial near-presence or quality of presence of a corresponding stakeholder to form a composite, at least partially biometric identification information set specific to a resource, device, and / or event / activity instance set of one or more human individuals. Using a tamper-resistant environment, this combination can be performed during the publication of a resource and / or event / activity instance subject IIS (e.g., when publishing an identification information set for a document or other REAI, such as when saving a software program, when sending an email, text message, conducting a video conference and / or other "live" communication event, and / or when using an Internet banking arrangement). This composite, partially biometric-based information set can then be used as a resource and / or event / activity instance set identification information set associated with a human individual, where such an information set is securely created, for example, for use during the secure process of publishing an event / activity instance.

[0254] In some EBInet embodiments, the at least partially biometric-based identity information set that provides this near-presence or quality of presence for resource and / or event / activity instance set publication events can occur concurrently with, rather than operatively concurrently with, the acquisition of corresponding biometric identity information sets for stakeholders and / or users. Each such composite identity information set can be at least partially cryptographically protected, for example, using one or more cryptographic hashes (which can be based on using at least a portion of the biometric information of the identity instance set in generating one or more cryptographic hash keys), and wherein such hashes can be stored as one or more security tokens. Each such composite identity information set can be maintained as an authentic and reliably verifiable set of information. Such sets can be used, for example, to calculate activity authorization (e.g., authentication of authorized users) and / or stakeholder signatures (e.g., attestation), and / or to identify, evaluate, and / or manage one or more attributes of such set's associated resource and / or event / activity instance set, and / or associated one or more stakeholders and / or other subjects.

[0255] In some embodiments, at least a portion of the composite identification information set, and / or information securely derived at least in part therefrom, includes:

[0256] (a) information based at least in part on a biometric identification that uniquely distinguishes one or more stakeholder humans (e.g., as stakeholders, who may be CertPers) associated with a set of information about a particular resource and / or event / activity instance; and

[0257] (b) a set of identification information for at least one of the following:

[0258] (i) one or more EBInet electronic device arrangements, and / or one or more other Big Resource Subject Resource instances, such as, for example, one or more tangible instances of pharmaceuticals, food supplies, and / or electronic components, and / or one or more intangible documents, software programs, communication instances / sessions (e.g., emails, texts), digital currencies, and / or web pages, for each of one or more specific such Stakeholders, and / or

[0259] (ii) one or more such stakeholder-associated corresponding processes and / or event / activity sets (in this context, and generally herein, the event / activity set at least partially comprises, for example, an EBInet arrangement-related set of resources and processes for content publishing events / activities, banking transaction events / activities, secure communication events / activities, text or email events / activities, biometric information acquisition events / activities and / or the like), wherein, for example, such one or more events / activities each consist at least partially of a set of purpose-related one or more processes and each also comprises / involves one or more subject resource instances (wherein a subject resource comprises one or more intangible and / or tangible resource instances).

[0260] In some embodiments, obtaining and / or using EBInet identification information of a device arrangement securely and reliably generates a set of human identification information based at least in part on biometrics (such a set of identification information may include one or more unique identifiers of a human individual, such as an identification number, other unique code or identifier, and / or may be, for example, at least operationally anonymous with respect to social identification attribute information). Such identification information may be used, at least in part, to enable provision of human biometric (e.g., biometrically derived) identification information to other computing environment EBInet device arrangements to satisfy identification information requirements. Such requirements may include receiving device arrangements that use such information to compute a set of event / activity processes (e.g., to certify, identify, and / or authorize and / or otherwise govern), such as a set of identification information for EBInet published (which may be securely maintained or transiently (short-term) used) resources and / or a set of event / activity instances. Such sets of identification information and / or information derived therefrom may be used, at least in part, to ensure the trustworthiness, integrity, authenticity, identifiability, evaluability, digital rights compliance, and / or other contextual suitability (e.g., compliance with policies (such as specified rules and controls)) of one or more instances of humans, devices, and / or other such computing resources, processes, and / or sets of events / activities.

[0261] In some EBInet embodiments, a tamper-resistant biometric identification information acquisition and forwarding (e.g., AFSD) device arrangement can be used to securely acquire one or more portions of composite identification information, and can subsequently and temporally contemporaneously (as opposed to operationally simultaneously) forward at least a portion of such identification information and / or information derived therefrom for portability and / or use by an EBInet-compliant receiving device (RD) arrangement. Importantly for EBInet implementations, the acquired human biometric identification information includes, at least in part, quality identification information of a human's proximity and / or presence, wherein such information can be reliably used to at least one of identify a human stakeholder of a set of resources and / or event / activity instances with respect to a computing environment activity associated with the stakeholder. Such EBInet human-specific identification can inform about the human's intent and / or suitability associated with the stakeholder with respect to the set of instances, and / or, by extension, about the suitability of such stakeholder's associated computing resources and / or event / activity instances for the respective user's purposes.

[0262] In some embodiments, such human stakeholders and such associated resource and / or event / activity identification information can be used to inform about the value of one or more computing resources and / or event / activity instance sets, and / or audit and / or otherwise characterize the value of one or more computing resources and / or event / activity instance sets, and / or authorize and / or otherwise manage the use of one or more computing resources and / or event / activity instance sets. Such characterization, notification, and / or management techniques may include, for example, a standardized and interoperably interpretable, quantified, fit-for-purpose quality assertion specification set (e.g., Cred), and / or a fact specification and test specification set of valid facts (EF).

[0263] In a service of trusted computing, in some embodiments, a computing environment resource set may include an EBInet-compliant device arrangement, whose corresponding identification information set includes secure EBInet-compliant identification information, such identification information set at least partially containing and / or otherwise securely associated with corresponding biometric-based identification information sets of individuals of one or more employees and / or other agents of the corresponding manufacturer, and / or corresponding biometric-based identification information sets of individuals of one or more users and / or owners (such information sets are used, for example, to perform stakeholder attestation of the REAI and / or REAI's respective IIS (e.g., where such individuals are CertPers). Such sets may securely contain and / or securely associate with one or more uniquely identified individuals of the manufacturer). The device arrangement may be provided with a set of secret information (e.g., one or more securely maintained secret keys and / or key association information) provided by a vendor. The identification information set of such a device arrangement may be used to inform about the value of one or more such device arrangements and / or associated computing resources and / or event / activity instance sets, and / or about whether to allow interaction with and / or use of one or more such device arrangements and / or associated computing resources and / or event / activity instance sets. Such an identification information set may also or may alternatively provide information for informing about the suitability of an interaction with one or more individuals who are stakeholders of such one or more device arrangements (including, for example, whether to allow the interaction and / or otherwise manage the interaction).

[0264] For example, in some embodiments, an EBInet-compliant set of identification information for a stakeholder's electronic device may securely include:

[0265] (a) at least in part unique device identification information, such information being based at least in part on one or more securely communicated and / or otherwise provided and securely maintained information sets (e.g., in some embodiments, secret information sets that are each securely associated with their corresponding, publicly available device identification information instances (such as respective certificates for the instances, such as EBICerts)) by the manufacturer and / or other device stakeholders (supply, value, and / or other business chain parties; and

[0266] (b) an at least partially biometrically based identification information set of one or more human stakeholders associated with such device (owner, family member, employee, agent (including, for example, a guardian (e.g., a supervisor)) and / or the like), wherein in some embodiments, the one or more identification information sets of such human stakeholders may, in part, further securely include and / or reference one or more PERCos identification information set stakeholder attributes of fit-for-purpose quality and / or valid fact instances.

[0267] In some embodiments, identification information attributes of an EBInet electronic device arrangement may, for example, securely include revision number information, manufacturing location (e.g., street address, city, and / or country of origin), and / or manufacturing and / or shipping time and date information, respectively. Such attributes may also include biometric-based information obtained from one or more individuals corresponding to the device arrangement (e.g., one or more SVCC stakeholders). Examples of such biometric-based information may include one or more employees and / or other agents of one or more manufacturers, wholesalers, distributors, value-added modifiers, retailers, shippers, resellers, purchasers (e.g., instance owners), and / or other one or more stakeholders, such as SVCC parties, respectively, of the device arrangement. Such information may include at least a portion of the EBInet electronic device identification information set, and different such biometric-based information may be securely and sequentially obtained as such a device undergoes a manufacturing, distribution, acquisition, and usage lifecycle.

[0268] In some embodiments, an EBInet device arrangement (e.g., a RIIPU and / or NIIPU arrangement) can be used, for example, to develop and manage identification information sets to support SVCC and / or other serialization management of, for example, tangible goods (e.g., goods in transit). Such management can include creating / publishing one or more identification information sets that characterize, for example, the subject matter of an event / activity instance. Such subjects can include any identifiable tangible object, such as clothing, medicine, food, appliances, electronic components, jewelry, raw materials, building materials, vehicles, machinery and / or components thereof, and / or the like, and / or corresponding instances involving the aforementioned events / activities. Such identification information can be used for electronic auditing of SVCC of such tangible item sets, other management, distribution, acquisition and / or other associated activities, such as usage / authorization, management monitoring and / or control.

[0269] In some embodiments (e.g., various SVCC embodiments), an EBInet acquisition and reception component device arrangement operates in conjunction with a network-related management arrangement. The EBInet device arrangement may include, for example, proximity and / or presence quality biometric identity acquisition and forwarding stations (AFSD arrangements), as well as mobile reception, carrying, and forwarding device arrangements (RCFDs), and may also include fixed-location device arrangements, such as those embedded in building infrastructure (e.g., for access control and / or authority management, employee and / or other human traffic and / or location auditing / management (e.g., using AFDs), manufacturing control computers, manufacturing and / or other robots, IoT arrangements, home appliances, and / or the like). Such a network-connected arrangement can address important challenges by providing, for example, highly reliable and practical contemporaneous proximity and / or presence quality biometric identification implementations in a cost-effective, adaptable, and user-friendly arrangement. Such a device hardware and software arrangement can support, for example, social networking, communications, and network security-sensitive applications, where assessing the motivation and / or suitability of stakeholders (one or more) may be critical to the reliable / secure and / or otherwise appropriate use of computing resources and / or event / activity instance sets. In situations where network security or trusted and reliable social and / or business networking or communications are high priorities, the use of such an EBInet device arrangement, particularly in combination with one or more stakeholder attribute information sets of PERCos (wherein the attributes may include at least stakeholder Cred and / or EF attributes), may provide motivation, intent and / or other suitability assessment tools for determining (or estimating) whether the trustworthiness and / or other suitability of any such resource and / or event / activity instance meets user purpose considerations.

[0270] In some embodiments, EBInet implements presence and liveness information acquisition and authentication, at least in part, by employing an arrangement of biometric transmitters and sensors in a biometric identification information acquisition and biometric-based personal identity forwarding "station." Such a station is operable to acquire personal identification information that is at least partially biometrically derived and / or information derived therefrom, and then forward the personal identification information that is at least partially biometrically derived and / or information derived therefrom to one or more EBInet receiving device arrangements. Such receiving arrangements may contemporaneously (within a specified time interval and / or other set of timing conditions) utilize such biometrically acquired and / or information derived therefrom, and / or forward such information and / or information derived therefrom to further receiving device arrangements. Such information, based at least in part on biometrics, may be used to control and / or audit events / activities of one or more sets of processes that require highly reliable user identification information. Such a station (e.g., which may be implemented in a portable, but not highly mobile, arrangement) may employ concurrent presence identification, including liveness and / or other presence determinations, without implementation costs (production costs), size, packaging, energy considerations (battery power consumption), transmitter and sensor placement, multiple device (e.g., mobile, laptop, desktop, IoT, larger devices, etc.) implementation, and other business considerations that would make widespread, redundant use of expensive presence quality operationally concurrent identification information acquisition systems commercially impractical and user-unfriendly in various situations. Such an acquisition and forwarding station, combined with EBInet proximity presence and / or presence quality biometric identification technology, provides a practical and reliable partially biometric composite identification information solution for the highly secure identity assurance necessary for a reliable, trusted set of identification information for subject resources and event / activity instances.

[0271] In some EBInet embodiments, use of at least some individual stakeholder and / or other user biometric-based identification information is controlled at least in part according to corresponding specifications for securely maintaining and implementing concurrent time interval management. In some such embodiments, a composite identification information set for a reliable set of resources and / or event / activity instances (e.g., over a period of time) can be securely included and / or otherwise securely integrated with (e.g., includes and / or is associated with) time intervals and / or other time-based information to form an at least partially time-based (e.g., time-limited) and securely retrieval, receipt, use, portability, and / or forwarding set of related information for time-based management. This combination of time and REAI identification information supports practical biometric identification identity acquisition and use arrangements, where an acquisition station (e.g., AFSD) is designed to manage the time-based forwarding of identity information to one or more identification carrying and / or use smart device identity arrangements (and / or manage the receipt and / or use of such information), for example, according to time-related specifications that are at least partially securely maintained (e.g., using a secure (trusted) clock and tamper-resistant hardware logic and memory, e.g., tamper-resistant).

[0272] In some embodiments, one or more such EBInet device arrangements can be used as a "hub" for acquiring, receiving, carrying, using (e.g., assessing suitability, event / activity management), and / or forwarding information, where such a hub can include, for example, one or more network devices (e.g., smart routers), smart IoT devices, and / or smart mobile devices (e.g., smartphones, smart watches, smart pendants, smart jewelry, smart glasses, and / or the like) of such users. Such devices can have respective embedded and / or connected and operationally isolated EBInet-compliant components, such as respective EBInet modular component arrangements (e.g., RIIPUs, NIIPUs, and / or the like) that implement secure, isolated, at least partially biometric-based identity auditing, and / or resource and / or event / activity instance set management (e.g., REAI-related authorization and / or other rules and / or control management). EBInet smart devices and / or other EBInet arrangements can be used as a device arrangement for identifying, carrying, using, and / or forwarding user biometric identity information that has been received at one or more designated, authorized instances constrained by time (and / or context).

[0273] In some embodiments, one or more instances of an EBInet at least partially biometrically based identification information set are embedded, overlaid, and / or otherwise inserted / integrated into a digital and / or physical information object, such as a document (e.g., a news article or a multi-party contract), an image, audio, video, a data stream, a web page, and / or other data file (whether stored or presented), wherein such identification information comprises a near-presence or quality of presence of an at least partially biometrically based identification information set. For example, such an information set, when provided as a watermark information set, may be provided in the form of a visible and / or hidden watermark (e.g., fingerprint) information set, such as one or more overlay information sets printed on a printed page, such as printed as a visible overlay on each page of a digital contract, as an authentication / certification information set affirming the content of a document (e.g., a contract), and / or integrated into a shape and / or dot pattern within a textual and / or pictorial representation. Such watermarks may be in plain text and / or partially or fully encrypted to embed the at least partially biometrically based information within such a presented object, and wherein such a presentation may provide and / or otherwise employ EBICert for such an object. Such a watermark can provide biometric authentication of such an information object (either physically or virtually during creation and / or physical presentation and / or publication, through the presence of a party), as demonstrated, for example, by using contemporaneous, at least partially biometrically based, identification information carried by the RCFD to provide such information to reaffirm / authenticate such an object (e.g., to reaffirm the authenticity of an already watermarked information object). Such information provision and / or affirmation process set can operatively occur upon saving such an object and / or at periodic and / or otherwise scheduled times, and / or at times associated with an event / activity (e.g., at the time of the signature(s) of a contract or upon asserting / reaffirming the authenticity of a document).

[0274] Such watermarks may be visible (e.g., diagonal watermarks, barcode page footers, and / or the like) and / or subtle / visible (e.g., digital watermarks inserted and / or otherwise embedded in digitally stored and / or physically presented objects), through information conveyed, for example, through font dot patterns and / or shape modifications, and, for example, inserted into (and used within) digitally stored and / or printed data files, or one or more portions thereof. Such insertion may occur during object storage, editing / modification, presentation, compilation, use, registration, publication, and / or communication (such as when transmitted for registration with one or more organizations and / or cloud object registration and authentication services), and / or may occur during the presentation of an object (or the presentation of at least a portion of any such object). Such a presented object may take the form of a physically printed, displayed, and / or played instance provided in the form of a PDF, MS Word document, presentation materials, image file, video, and / or audio file (an inserted audio watermark may be represented by sound data that is beyond the frequency / wavelength range of human audio). Such watermarks can be used for object evaluation, including "certifying" the authenticity, suitability, reliability, quality, stakeholder identity, and / or other relevant characteristics of contracts, news reports, scientific research, and other data representations, and / or implementing stakeholder rights management for objects. Such watermark information can include cryptographically protected, hashed, and securely maintained and / or transmitted biometric identification information (e.g., contained in an IIS) that is at least partially proximate to the presence or quality of the presence, for example, received from and / or based at least in part on one or more sets of contemporaneous biometric identification information forwarded by RCFD. Such information sets, when included within a rendered object, can provide an associated set of object identification information (e.g., an embedded, securely rendered object that characterizes / identifies the IIS). Such IIS can include securely captured and stored information associated with the time and / or location and / or other processes associated with the creation, modification, communication, presentation, use, registration, publication, and / or execution of instances of objects, such as contracts, multimedia, or software code. Such identification information may also include one or more portions of identification information related to creation, modification, communication, presentation, registration, publication, use, object content signing and / or execution events / activities of a secure record of one or more EBInet device arrangements of the subject.

[0275] In some embodiments, digital objects and / or tangible instances of such objects (e.g., object content and watermark arrangements) and / or corresponding attestations and / or signatures of such objects based at least in part on a biometric identification information set watermark (e.g., a watermark in the form of an EBInet composite device identification information set provided as an information reduction (e.g., a digital hash)) can be securely registered, for example, with one or more independent parties (e.g., one or more organizational management and / or cloud service registration utilities) and / or registered on an EBInet device arrangement using "local" registration, for subsequent digital and / or tangible object (and / or portion thereof) signature / attestation authentication and / or other verification (such authentication and / or other verification can include, for example, verification of the object content and / or information content of the object watermark instance). Printed instances of objects employing EBInet-based watermarked information can be securely scanned and interpreted by a computer scanning arrangement, where, for example, a printer / scanner is incorporated into a ruggedized EBInet modular component protected processing environment (PPE) arrangement (such as a RUD incorporating a NIIPU), which can be used to securely identify and / or interpret the permissions associated with the presentation of such watermarked objects. For example, a document's watermark may carry a personal identifier and associated rights information to identify whether a physically present user identified by the IIS information forwarded by the user's RCFD satisfies the attributes identifying a given document and / or who specifically (e.g., a biometrically identified individual) can copy (and / or otherwise use) the watermark control information for a given document. In some embodiments, such PPE may also interpret printable digital objects prior to printing to evaluate and / or otherwise interpret digitally stored watermark information and determine the user's rights to print such watermarked objects and / or display at least a portion of such watermark information, for example, by using a rights management arrangement.

[0276] In some embodiments, an isolated, protected processing environment can be used to interpret watermarks / fingerprints in documents (which can be scanned from hard copies of corresponding tangible paper-based documents), respectively, wherein such PPE interprets plaintext and / or encrypted at least partially biometric-based identification information sets, reading / extracting such sets from their corresponding electronic and / or hard copy watermarks. Such object interpretation can, for example, present one or more portions of the text, corresponding embedded and / or otherwise securely associated at least partially biometric-based watermark identification information sets, in an interpretable (e.g., clear) usable form for use by a user and / or EBInet device and / or service as an EBInet modular component and / or service. In some embodiments, at least partially biometric-based identification information of proximity to presence and / or quality of presence can be presented in the form of audio information, such as an encrypted ultrasound signal, wherein such communication information can be acquired and, for example, decrypted, using an audio ultrasound receiver / sensor arrangement associated with an EBInet-compliant RD arrangement and a secure, hardware-isolated PPE modular component arrangement. In some embodiments, a video and / or other image representation of a data file may include a hidden, encrypted information "video (e.g., video may include video image signals and audio signals) subchannel" that at least partially provides biometric identification information approximating the presence and / or quality of presence, such as one or more IITs and / or EBICerts. Such a channel may be embedded in the channel's corresponding video object in the form of an interpretable and decryptable modification of the source image (e.g., a modification / modulation of, for example, an abnormal and / or otherwise specified color / wavelength, position and / or intensity / brightness and / or period / frequency of, for example, such signal components within an image comprising a video sequence). This information arrangement can result in, for example, a video data file instance embedding information that is not typically or practically identifiable and / or uninterpretable (e.g., encrypted information and lacking a corresponding decryption key) without the EBInet secure interpretation arrangement. Such an EBInet watermarking implementation can, for example, be used to identify and prevent the improper use of "forged" objects ("deepfakes") such as audio, images, and / or video.

[0277] In some embodiments, such image presentation modification / modulation can carry at least partially encrypted identification information based at least in part on biometrics, in the form of an embedded image / pattern and / or image / pattern sequence watermark carrying information set. When such objects (to be watermarked) are saved, edited / modified, presented, compiled, used, registered, published, transmitted, and / or the like by their creator, modifier, distributor, user, and / or other commercial, social, societal, and / or other chain of disposal and / or control parties, the identification information of such object watermarks can be securely provided to a receiving RD and / or RUS arrangement, for example, automatically forwarded by the user's respective RCFD (e.g., using pBIDE). Such information in the form of such watermarks can then be readable and processable by an EBInet-compliant RD arrangement (e.g., a user's RCFD-compliant arrangement) and presented in plain text.

[0278] In some EBInet watermarking embodiments, a watermark may be at least partially unidentifiable to a user of a device arrangement that is playing or reading a watermarked data file, e.g., wherein an at least partially encrypted corresponding watermark may be at least partially hidden within such a file. For example, an EBInet-compliant watermark may be hidden in such a manner that only authorized stakeholders, users, and / or device arrangements (e.g., such entities (e.g., NIIPU or similar RD arrangements) having a registered, authorized identity based at least in part on biometrics and / or embedded identification secrets) can identify, decrypt, and / or otherwise interpret and present, transmit, and / or store such information in plaintext (unencrypted) form.

[0279] In some embodiments, a computer printer (which may be a printer / scanner) may support an EBInet embedded secure hardware modular component arrangement (e.g., a NIIPU arrangement), for example, within a parent printer arrangement, wherein the printer's RUD may receive at least a portion of a user's at least partially biometric identification information (e.g., contemporaneous biometric information), for example, from an RCFD. This information may be transparently provided (forwarded) to the printer's RUD arrangement without user interface "friction" for secure binding (e.g., object watermarking) to a document to be (or being) printed. This forwarding may be performed, for example, by the RCFD transmitting the EBInet contemporaneous set of at least partially biometric identification information to the RUD in response to a user selecting a print function (e.g., selecting a "securely print watermarked document" function). If available and provided, such identification information, or one or more portions thereof, may be at least partially encrypted and embedded in a visible and / or hidden printed watermark that may be visually imperceptible to humans, for example, by involving very subtle (e.g., not visually noticeable) and uninterpretable (encrypted) modification(s) to one or more fonts in a manner that is cryptographically controlled (e.g., requiring a decryption key).

[0280] In some embodiments, a printed object (which may be in the form of and / or include one or more images) may be scanned (or photocopied) using, for example, a secure scanner (or camera) associated / embedded in an isolated protected processing environment of a RUD modular component, such processing environment being capable of securely interpreting / extracting watermark cryptographically protected information (e.g., using encrypted hash information to be read for verification purposes, such hash information corresponding to the composition of the object). Such RUD, RCFD, and / or an associated network-based authentication service may authenticate / verify such object (and its associated watermark arrangement) against, for example, a registered instance of such object, and, if authentic and such RUD, RCFD, and / or service and / or its associated user having sufficient object-associated permissions, may provide a display of such authenticity information results in plain text on an RCUFD smartphone or other compliant computing device (e.g., a laptop or tablet), where such object may be securely stored, for example, in digital form. As with many other EBInet information embodiments, watermark object identification information can securely include the time, date, signature location and / or other stakeholder activities, and / or other object characterization information, such as history / provenance information, object (a) creation, (b) receipt, (c) forwarding, (d) storage and / or (e) modification information, and / or associated EBInet-compliant device arrangement information.

[0281] In some embodiments, such watermarked objects and their embedded identification information may be automatically transmitted via an associated EBInet device arrangement (e.g., a printer, smartphone, laptop, tablet, and / or network communications arrangement), for example, upon printing, other presentation, and / or other events / activities thereof, to a cloud and / or organizational registration service, where such information may be stored, for example, for audit and / or future document certification and / or assessment purposes.

[0282] In some embodiments, when an image sensor (e.g., in a scanner) enabled by an EBInet-compliant RUD arrangement reads such an object (e.g., a document), where such sensor may be, for example, a component of an EBInet-compliant parent smartphone or other mobile device that uses its camera arrangement to view such an object, such embedded information instances may be securely interpreted, and such embedded information and / or the contents of such document (if such object is encrypted) and / or one or more portions of such object's identification information may be presented to a user of such device in clear, unencrypted form. Such registered information may also be stored (e.g., as a registered instance) on such parent smart device (e.g., in at least partially encrypted form), and / or at least a portion of such object (e.g., at least a portion of its employed watermark contemporaneously acquired with respect to the presence or quality of presence, and biometric-based identification information carried by the RCFD) may be authenticated and / or otherwise verified by comparison with a set of registered object identification information stored by such organization, device, and / or service arrangement, and / or cloud service. Such stored registration information may be arranged by object type, content, and / or one or more associated organizational and / or human-specific identifiers, object purpose, object sensitivity, and / or the like.

[0283] In some embodiments, a printer compliant with the RD specification (e.g., transparently upon printer request) receives EBInet near-presence or quality-of-presence at least partially contemporaneous biometric-based identification information from an RCFD arrangement that transmits a corresponding, portable, contemporaneously generated set of at least partially biometric-based identification information. This set of information is used to create printed documents and images, which, in some embodiments, each include an at least partially visible watermark comprising, at least in part, an embedded set of information for ensuring document integrity, provenance, designated usage controls, stakeholder commitments, and / or otherwise providing relevant information characterizing a data file (e.g., a document and / or video) that is printed, displayed, stored, and / or otherwise rendered / remembered for visual interpretation. This watermark can be visually displayed on a printed page (and / or other printed item) in one or more standardized ways (e.g., including ways that are copyrighted as a respective design arrangement and / or unique branding) and can convey the identity of one or more parties with a stakeholder interest in any such printed item(s). Such a watermark may include other content object identification related information and may include the branding of the platform, service provider and / or application and / or other stakeholder organization associated with the watermark.

[0284] In some embodiments, the watermark's incorporated identification information may include one or more types of securely processed provenance-related information, for example, using an EBInet modular component NIIPU arrangement such as:

[0285] 1. the location(s) of preparation(s) (including, for example, events / activities, such as modifications) and / or execution(s) of the document(s); the time(s) and / or date(s) thereof;

[0286] 2. The equipment arrangements and / or network locations employed in the preparation of its document(s) and / or execution(s);

[0287] 3. Biometric identification information of at least partial approximate presence or quality of presence of each EBInet user / other document handling participant related to the document event / activity (e.g., biometric information acquired contemporaneously based on the EBInet AFSD);

[0288] 4. One or more instances of identifying information (e.g., a unique device identifier, a manufacturer identifier, a version number, and / or one or more device stakeholder personal identifiers of the SVCC) regarding the device arrangement employed in the signature of the content instance, respectively;

[0289] 5. Rights respectively associated with one or more REAI event / activity stakeholder individuals, e.g. where such individuals are at least partially biometrically identified by such watermarked information;

[0290] 6. Subject (e.g., content) control information, such as security management control information that, when at least a portion of a document's watermark arrangement is interpreted, securely causes one or more content instance security management processes (e.g., access permission control and / or communication notification, such as transmission to a management arrangement network that such document content is being rendered, displayed, and / or the like).

[0291] In some embodiments, a data file (e.g., a content instance) presented for visual interpretation may be at least partially encrypted and carry an embedded readily visible and / or normally hidden (not overtly visible when printed and / or displayed) watermark, wherein such information may be encrypted and require one or more keys and / or other secret (e.g., embedded unique identifier) ​​information instances to decrypt. Such keys and / or other secret information instances may be used to enable automatic interpretation and authentication and / or other verification of the data file content (including, for example, a watermarked information set), respectively. Such interpretation and authentication may be automatically performed by an EBInet-compliant device and / or cloud service arrangement that reads and interprets such information and, for example, checks such information against a registered database of an organization's and / or cloud service's REAI and / or subject matter content to determine, for example, the authenticity of the data file content. Such checks may include, for example: securely embedded attribute information in the watermark, such as time, date, address, organization / department, and / or time / place of subject creation; and / or associated stakeholder and / or device composite identification information based at least in part on biometric information captured by the AFD in relation to such information sets in relation to proximity presence and / or quality of presence.

[0292] In some embodiments, such a registration event for an identification information set and / or subject content instance can occur during a corresponding secure communication event for such an instance. Such an event can be initiated by an EBInet at least partially biometric identification information usage arrangement (e.g., RUD) that communicates with such one or more registration services upon saving, printing, communication, other use, and / or other events / activities. When such a REA instance or one or more portions are displayed and / or printed and / or otherwise presented, any (or multiple) such registration instances, one or more instance portions, and / or registration information derived therefrom can then be used to subsequently authenticate and / or otherwise verify the REAI or one or more components thereof. For example, when an EBInet-compliant printer that uses identification information based at least in part on biometrics prints a document, the printer and / or a user's RCFD parent smart device incorporating an EBInet modular component arrangement can use the smart device arrangement to display information regarding the authenticity of the identification information set and / or subject content instance, or one or more portions thereof, based on an EBInet watermark, and / or can display document-related attribute information carried by and extracted from the watermark, where, for example, the RUD and / or such RCFD arrangement can at least partially decrypt and extract information from the watermark. In some embodiments, such extracted information can also include, for example, a unique alphanumeric identifier for the identification information set and / or one or more stakeholders associated with the subject content instance and / or an arrangement of production, modification, and / or communication devices for such instance.

[0293] In some embodiments, an EBInet identification information set and / or a watermarking process set data file for a subject content instance may provide an integrated hash of document characteristics and stakeholder (e.g., CertPer signer(s)) characteristics, including at least a partial biometrically based unique identification information set that approximates the presence or quality of the presence. Such an information set may be embedded into the identification information set and / or the subject content instance data file during document creation, modification, and / or during registration of such data file with a verification service. Such an information set may also be used for document signing in online and / or physically printed form using a dedicated biometric desktop / accessory and / or pen arrangement (e.g., having a built-in biometric reader arrangement, such as to serve as an operationally simultaneous biometric identification arrangement that verifies the actual physical presence of a party identified by (and matching a contemporaneous biometric-based identification information set of near presence or quality of presence)) and / or an associated printer, where instructions for printing the biometric identification information set cause the biometric information set of each participating individual (and / or information derived therefrom) to be embedded as respective visible and / or hidden information sets on and / or in respective documents / data sets during the printer printing, communication and / or storage process. Subsequently, smart devices such as smart scanners (which may be, for example, printers / scanners) and / or smartphones - having, for example, corresponding embedded EBInet modular component isolated protected processing environment arrangements that process watermark identification interpretation software and corresponding decryption keys - may use, for example, their corresponding image sensors (e.g., contact image sensors) and / or CCD and / or CMOS digital camera sensor arrangements to read the document and generate corresponding human-interpretable data files and / or display a visual, human-interpretable set of information content, such generation and / or display resulting at least in part from the decryption of the information content (or one or more corresponding portions thereof) of the visible and / or hidden, at least partially encrypted EBInet watermark arrangement.

[0294] In some embodiments, an EBInet arrangement can store, transmit, interpret, and / or display at least a portion of both the subject matter of a data file (e.g., a contract) and hidden watermark information for the data file, wherein, for example, a contemporaneous and / or operationally concurrent at least partially biometric-based identification information set of a stakeholder (document signer, creator, distributor, notary, and / or the like) of an at least partially encrypted, near-existence and / or quality-of-existence biometric identification (due in part to the use of an AFD to obtain the stakeholder's contemporaneous biometric identification information) is part of such watermark information. Such information set can be forwarded (transmitted) to a printer and / or external computing arrangement (e.g., based on authorization and / or specifications of the stakeholder, e.g., transparently providing such information to the computer and / or printer upon request (e.g., using an EBInet arrangement trusted path instruction arrangement)) for preparing and / or printing the identification information set and / or subject matter instance containing such one or more visible and / or hidden embedded and / or otherwise securely bound watermark information sets.

[0295] In some embodiments, resources and / or event / activity instances (i.e., topics) can be securely bound to and / or otherwise securely associated with a corresponding plurality of at least partially biometrically based identification information sets. Such sets can be at least partially provided by independent parties (such parties can use the same information set publishing platform that supports standardization, compatibility, and publication (e.g., the same secure, compliant publishing framework)), and / or at least one of such identification information sets can be at least partially composed of multiple separately delivered identification information sets that serve as component information sets of such identification information sets that aggregate at least partially biometric proximity and / or quality of presence, wherein portions of such component information sets are provided by different parties, and at least a portion of such information sets each include contemporaneous at least partially biometric proximity and / or quality of presence identification information. For example, such aggregated information sets can be structured as a master IIS (e.g., an IIS instance of a parent superclass of a topic resource and / or event / activity instance (REAI) that is at least partially biometrically based). Such a master identification information set has (contextually appropriate) child IIS information instances of respective master IIS subset components (eg, governed according to applicable specifications, and which may, for example, at least partially biometrically identify different individuals).

[0296] In some embodiments, when and if a child IIS of a master IIS is supplemented with non-master IIS information, the master IIS can be updated with such supplemented (and / or modified) information (forming a new master version, e.g., with the same unique root (e.g., category) identifier) ​​to reflect its role as a superset of the REAI IIS, an at least partially biometric-based identity information set. Each supplemented / modified child (e.g., augmented) component set can employ at least partially biometric-based identity information, where such biometric-based information uniquely identifies one or more stakeholder individuals associated with at least a portion of the corresponding information instance aggregate. The child IISs can be based at least in part on a published / specified template framework (e.g., regarding their respective field types and expressions), such as those published by a user's employer, affinity group (AAA, ACLU, NRA, IEEE, and / or the like), family group, social network group, sovereign government, and / or the like. For example, a user's RCFD can store such child IISs as separately deployable components of an IIS deployment.

[0297] In some embodiments, the RCFD may store a primary IIS and / or CBEIIS for a corresponding device / individual and / or individual, such as individual and / or aggregated human group(s) (aggregation of organizational, family, and / or other group membership information), and a particular individual may have a primary IIS, (one or more) child IISs, and / or multiple individual IISs in an IIS arrangement, wherein one or more such IISs may be securely forwarded to an RD and / or RUS arrangement compliant with an EBInet arrangement for rule and control authority management (e.g., based on a security rule and control information set for (categories / groups of) individual and / or multiple such IISs, and / or securely associated with (categories / groups of) individual and / or multiple such IISs). In such embodiments, the identification attribute information that supplements and / or otherwise augments the component identification information set may include various forms of information instances, such as REAI characterization of testable valid facts and / or fit-for-purpose quality assertion information, and / or REAI audit and / or provenance information related to the subject matter characterizing the primary IIS.

[0298] In some embodiments, an EBInet device arrangement (e.g., an RCFD) can carry a master IIS for the device, one or more of its owners / users, and / or for the device / users and / or other REAI CIIS, where each such master IIS is a distinct resource object instance. A child IIS forwarded by an RFD (or AFD) can "pull" and compose its information set from any of its master IISs—and, if carried, from received child IISs generated by, for example, two or more master "parent" IISs. The master IIS and child IISs can be globally and / or selectively published and registered as securely (e.g., cryptographically) protected REAI instances with their respective IISs and available from a network such as a cloud and / or other organization-managed identity information service.

[0299] In some embodiments, EBInet's proximity to at least partially contemporaneous biometric-based personal identification information of presence or quality of presence supports highly convenient (e.g., transparently provided) identification information for social and business networking opportunities, threats, assessments, and decision-making. Such identification information can securely (e.g., encrypted) include and / or otherwise securely tied to testable, valid factual attribute information, such as an individual's age, occupation, certifications, gender, criminal and / or civil legal background (e.g., lawsuits, indictments, convictions, and / or the like), education level / degree / concentration, affinity memberships, nationality / country(s) of residence / workplace(s) and / or region (e.g., city), and / or other non-socially identifying but highly significant attribute information.

[0300] In some embodiments, at least partially contemporaneous biometric-based attribute identification information sets of proximity presence or quality of presence may include qualities achieved for a particular purpose (e.g., fit-for-purpose quality specifications) and / or social and / or organization-specific identification information, as may be desired or selected. Such high-information identification information sets, such as may be carried in a RCFD EBInet NIIPU modular component arrangement on a mobile parent smartphone, may support transparent, effortless, and substantially reliable individual-specific identification that supports informed assessment and decision-making by connected computing participants and / or their EBInet-compliant computing arrangements.

[0301] In some embodiments, EBInet supports an EIFF (Presence Identity Facing Forward) (e.g., it provides IIT) process set that includes a biometric-based identification information set that is at least partially close to presence or quality of presence, which is forwarded to a device arrangement that requests or otherwise receives compliance with specifications to meet user and / or stakeholder REAI identification information needs and / or usage functions. This EIFF identification information provision can transmit substantially reliable human identity and context-related attributes in a manner that is transparent to the transmitter-user, subject to the interactive EBInet arrangement's compliance with identification information forwarding and reception policy specifications. This EIFF process set at least partially employs at least partially biometric-based identification information that is close to presence or quality of presence, which employs a secure component arrangement (e.g., NIIPU) in a highly reliable and tamper-resistant manner for use by FD and RD arrangements, respectively. Such identification information transmission may take the form of at least partially contemporaneous biometric-based (e.g., at least partially biometrically derived (e.g., determined)) identification information forwarded from an EIFF supporting parent mobile device RCFD, which identification information may be used to securely and reliably authorize actions (events / activities), and / or be at least partially securely associated with and / or integrated into identification / audit information sets for any computing resources and / or events / activities. Such forwarding EIFF identification infrastructure supports computation of authorization using the presence of accurate human identification information sets, for example, for pass / fail determinations, and / or other information usage consequences, for example, for implementing specified rights management, suitability assessments, and / or network security assurances.

[0302] In some EIFF embodiments, a "master" identification information set for each REAI is configured to support extraction of a subset of applicable information elements for inclusion in each REAI sub-IIS of such master set, such sub-IIS being appropriately composed by the user and / or the user's respective computing arrangement according to specifications and / or contextually to meet the purposes of the respective user and / or stakeholder. Such sub-identification information sets can be generated to provide contextually appropriate subsets of such master sets, wherein such subsets provide identification information that is at least partially based on biometrics and can also provide contextually appropriate identification information, such as information that is consistent with the respective purposes of the user and / or other stakeholders. For example, some contexts may appropriately require different sets of sensitive personal attributes, such as one or more of the following: Social Security number, confidential employee and / or other organizational ID, age, street address, telephone number, health information (e.g., health disorder and / or genetic information, such as blood pressure information, cardiac function information (e.g., heart rate, electrocardiogram and / or related information), illness and / or accident history), financial information (e.g., credit score, income, debt and / or donations), legal information (litigation, lawsuit / trial outcomes (e.g., verdicts), settlements), family information (e.g., information identifying and / or otherwise describing parents, children and / or other relationships), and / or the like.

[0303] In some embodiments, a contextual identification information manager arrangement may determine which elements and / or combinations of elements of a REAI (e.g., a primary REAI or a particular set of sub-identification information) should or should not be made available in a given context, e.g., as a sub-REAI's proximity or presence accuracy based at least in part on biometric IIS, based on, for example, a human social networking purpose or an organizational supply chain management purpose and their respective contexts. For example, in a social networking context, one or more portions of user identification information stored in a primary REAI may not be made available in one or more social network persistently stored or transiently generated and used IISs (e.g., where inappropriate, such as specified not to be disclosed through use in such IISs), e.g., based on the intended context for the use of such information, such as a purpose category (e.g., social networking with strangers).

[0304] In some embodiments, a contextual identification information manager arrangement can securely and contextually manage (e.g., control in response to context variables) the appropriateness of an EBInet device arrangement to receive, forward, and / or use one or more portions of an identification information set. Such a contextual identification information manager arrangement can, for example, operate as an EBInet arrangement service set (e.g., operating on a RIIPU or NIIPU arrangement (a root or networked identification information processing unit arrangement)). EBInet modular component arrangements are secure, economical, protected processing environment hardware / software arrangements. They at least partially support the use of cryptographically protected IDs that are securely cryptographically bound (e.g., in the form of UIDs) to corresponding intangible information objects that include identification information sets corresponding to, for example, identifying / characterizing computing resources and / or event / activity instances. Such identification information sets include at least partially biometrically based identification information of stakeholders of such instances, wherein such identification information includes information about each such instance. The EBInet RIIPU combines secure management of biometric proximity presence and / or quality of presence, stakeholder biometric identification information acquisition (which securely combines both stakeholder biometric acquisition and resource and event / activity instance identification information analysis), and associated management functions into an economical, compact, at least partially isolated, secure, protected processing hardware / software arrangement. The NIIPU is used to securely manage the use of identification information based at least in part on biometrics, and when used with, for example, a parent arrangement sensor arrangement, can perform biometric identification information acquisition, depending on the implementation. In some embodiments, the NIIPU can securely manage the creation of IISs based on such biometrically acquired or based on received biometric-based identification information.

[0305] In some embodiments, when available and / or contextually appropriate, EBInet master IIS and / or child IISs are used, which are operatively received, carried, forwarded, and / or processed by an EBInet device information arrangement. For example, a mobile RCUFD (receiving, carrying, using, forwarding device) arrangement may receive contemporaneous biometric IIS and / or identification information from a proximity or quality of presence biometric information acquisition arrangement (AFD) for creating at least a portion of a proximity or quality of presence biometric-based IIS, and such mobile arrangement may use, carry, and / or forward such information set and / or portions thereof. In some embodiments, such information may be used, for example, by an EBInet-compliant receiving and using device arrangement (RUD), where such information is provided within a given social network context (e.g., social interaction), a given professional activity (e.g., performing work), a given social activity (e.g., paying taxes or entering into a business or other agreement / transaction), and / or the like.

[0306] In some embodiments, the master IIS elements can be conditionally maintained anonymously as described herein, and, for example, one or more securely maintained (e.g., social identifiers) identification information elements (e.g., social security numbers) can be made available for use by, for example, child IISs only under specified, strictly controlled circumstances, such as based on securely exchanging IIS sets between compliant devices and / or service arrangements according to specified rules and controls. Such exchange may require satisfying the conditions (having appropriate attributes) of the other party's service and / or device arrangement to accept / receive forwarded identification information and / or be allowed to receive such information, based on the circumstances / context of such interaction, including permissions / attributes of the associated devices, services, and / or biometrically identified individuals and / or other conditions associated with the interaction.

[0307] In some embodiments, the EBInet EIFF identity information infrastructure employs a shared information repository arrangement, wherein information elements can be shared / adopted across and / or by multiple instance identity information sets. For example, a stakeholder individual (including a resource instance) can be associated with multiple different resources (e.g., different devices), wherein such individual has a stakeholder relationship with each of the multiple different resources and is a significant attribute (i.e., stakeholder-related) of each of the multiple different resources. In such embodiments, a master IIS and / or corresponding child IIS of one or more resources describing such a stakeholder can include (i.e., be used as) a corresponding attribute set (e.g., second-order) of a security binding for one or more resources of such attribute set, and can include constituent elements of the identity information set for such one or more resources. Such stakeholder information can, for example, inform about the suitability of the stakeholder resource for a specified and / or otherwise intended user purpose, such as for the purpose of achieving a user's computing activity.

[0308] In some embodiments, the EBInet environment includes at least a portion of a pervasive biometric ID environment (pBIDE). This pervasive ID environment means that at least partially contemporaneous biometric proximity-based or presence-based quality identification information sets (IISs) are carried by various individuals on their RCFDs for ubiquitous broadcasting to or otherwise communicating with RD arrangements for evaluation and / or control of respective computing events / activities of such arrangements. For example, whenever one or more relevant and available IISs (e.g., EBICert) are required and / or otherwise used to enable execution and / or auditing of an event / activity, such as when a person / RCFD composite is required to interact with a RUD, RUS, and / or another RCFD, a pBIDE EBInet instance may be provided. Such use may be transparent and / or require little or no action and / or knowledge / notification on the part of the IIS of the user carrying the RCFD. Use of an IIS (e.g., IIT) for event / activity purposes may include, for example, one or more of: accessing a secure database, accessing a secure website, unlocking a door, starting a vehicle, issuing a REAI IS, executing a serialized supply chain instance, participating in a social network, participating in a digital currency transaction (e.g., using EBICoin to initiate and end digital coin / owner individual (Fusion Identity Entity) coin transfers of digital coin sets), and / or sending and / or receiving emails, texts, or other communications (e.g., EBInet issues and sends an email or text to a recipient, and EBInet RUD controls treat such authorized individual as the party or only party authorized to open such communication).

[0309] In some embodiments, an EBInet identification information carrying appliance (e.g., an individual / RCFD) can be identified by using a near field communication (NFC) interface of a smart device (e.g., a smartphone) in a process comparable to a "pay by phone" application, wherein a smartphone user can walk up to, for example, a check-in counter, a store item collection purchase checkout arrangement, or an entry control kiosk and physically place / present the smartphone near the NFC (or other proximity) interface of the RD appliance (guided by, for example, a printed target). The smartphone and appliance can then communicate with each other, and the smartphone's RCFD can transmit a contemporaneous biometric identification of proximity or quality of presence, relevant other attributes, including any relevant E / A regulatory information, and further, as desired, the user can perform an operationally concurrent smartphone-based biometric identification for authentication confirmation purposes to authorize the RD appliance to unlock or otherwise operatively respond based on the device / individual identification information (e.g., in the form of one or more IIS) transmitted by the RCFD, wherein such information can include the contemporaneous proximity or quality of presence of the individual and the operationally concurrent smartphone biometric identification information.

[0310] In some embodiments, such use of the pBIDE may include calling other parties, for example, via their devices. Such calls may be used to determine whether the corresponding IIS (and / or its information components) of one or more other parties satisfy a search to find / identify who (e.g., is physically near someone) possesses one or more attributes specified by the identifying information. Such attribute matching may satisfy one or more requirements, serving as a precursor function set that must first be met for the applicable event / activity to occur. For example, a pBIDE precursor electronic interaction exploring matching attributes / interests may then lead to a set of direct electronic and / or person-to-person physical presence interactions. Examples of such pBIDE-initiated activities include RCFD pBIDE broadcasts by IIT and other RCFDs / individuals receiving and responding to such broadcasts, resulting in, for example, interactions between individuals or individuals / devices, such as those registered as belonging to a particular affinity group (e.g., AARP, ACLU, NRA, and / or the like), interactions between season ticket holders of professional sports teams (e.g., sharing a table at a coffee shop), social networking communications between classical music enthusiasts, EBInet device / individual interactions between corresponding device / employee instances of a large corporation, and / or other shared / common interests and / or attribute sets. Communication using pBIDE can be dependent on matching specified IIS information attributes and can also be dependent on IIS communication and / or usage control specifications deployed by one or more corresponding event / activity participating EBInet forwarding and / or receiving devices and / or services, where such control specifications can be specific to a given event / activity category (e.g., meeting directly with another member of an affinity organization). In such an embodiment, one or more IISs (e.g., IIT and / or EBICert) can be used for the daily activities of a user carrying an RCFD, and such IIS information is forwarded to one or more RUDs and / or RUSs, where such information is made available by such RCFD according to corresponding specifications (broadcast at one or more given locations, times, and / or other one or more conditions) and / or direct user instructions. Utilizing pBIDE, identification information forwarding can enable such information to be provided to recipients for evaluation, response, and / or control of EBInet-related events / activity, where such evaluation, response, and / or control is based at least in part on IIS content.

[0311] An EBInet device arrangement can securely carry and / or otherwise securely store IIS information (e.g., in a remote secure information store) and can subsequently forward IIS information, such as contemporaneous presence quality information based at least in part on biometrics, made available using pBIDE. In some such embodiments, an EBInet RD arrangement can request or, in response to provision (e.g., periodically broadcast by an EBInet forwarding device), receive identification information from a corresponding RFD (e.g., RCFD) arrangement. This information can include the contemporaneous identification of the arrangement's corresponding device and / or user as a presence identification token, such as a corresponding IIT, other IIS, and / or one or more portions thereof. Such corresponding requests to receive IIS (or otherwise be informed of the presence of an individual and / or other REI) can be periodic and / or can occur based on, for example, event / activity process set context management, such as a request by a designated one or more receiving device arrangements (e.g., activated by an RD sensor / human identification arrangement recognizing the presence of an individual (e.g., a human or a specific individual)), and / or as a result of a request initiated by a user of the corresponding EBInet arrangement. Such identification information may include, for example, an at least partially biometrically based IIS or one or more portions thereof of at least partially contemporaneous proximity presence or quality of presence provided by the RCFD.

[0312] Impersonation of media and other individuals impersonating a specific presence is becoming a major societal and cybersecurity challenge. In some embodiments, individuals using / participating in an EBInet arrangement and carrying an RCFD can address this challenge by securely provisioning, contextually managing, broadcasting, and / or requesting and responding to root biometric identification information that approximates presence and / or quality of presence, which in some embodiments is coupled with credentials and / or other testable / verifiable valid factual information securely tied to such root identification information, and, for example, forms an EBInet identification information digital wallet. For example, a person can carry such an RCFD identity information provisioning arrangement (e.g., when carrying a pBIDE implementation) that can securely (a) automatically unlock a door when the person approaches or grasps a door handle, (b) automatically log the person into a secure website, such as when using a bank account management portal, and / or (c) address a group of individuals, such as during a politician's news Q&A session.

[0313] Regardless of the context, whether writing software code, sending email, participating in an online social networking conversation, and / or being observed and recorded by one or more known and approved, and / or unknown parties to an event / action, in some embodiments, RCFD carriers can set up their mobile EBInet device arrangement so that it broadcasts certain approved identification information and / or responds to (one or more) requests for such information received in the context of the event / activity, and where such information provision can be securely governed by context-associated rules and controls.

[0314] In some embodiments, for personal information privacy and / or participant information complexity management, EBInet confirmation of proximity presence and / or quality of presence of individuals associated with an event / activity requires organizing the control infrastructure of presence information based on the purpose of such information collection. For example, during a politician's press conference, media attendees can set their broadcast function to off so that identification information of the politician and the politician's assistants can be safely collected while the news member information is not broadcast (or received / accepted by the media recording the RCFD). As another example, during a politician's political rally, the attendees include various types of participants (who have different roles). In order to limit unnecessary information complexity in the context and ensure contextually appropriate privacy, rally attendees can be instructed or advised to set their RCFD identification information to off, while politicians, politician's assistants, and security and facilities personnel can be instructed to have their devices set to broadcast on (or on request and on response).

[0315] In some embodiments, the RFD, RUD, and / or RUS that monitors and / or governs the assembly event activity component may receive and store such EBInet-enabled identification information in a database arrangement based at least in part on the RCFD owner / carrier role using a field-based structure, and may present a user-configurable interface that displays information filtered based on the interests of the RCFD user / user's employer and the context of the device / user activity.

[0316] In some embodiments, event / activity monitoring and control can securely and selectively implement identification of present devices / individuals based, at least in part, on securely associated category / type attribute information, such as, for example, (a) credentials and / or other such factual confirmations of journalists and / or other attendees, and (b) credentials and / or other factual roles of politicians (e.g., members of the U.S. Congress). Such received identification information can be securely associated with its media content (or other applicable content) and / or CIIS information informing such content about such media event / activity. For example, a cameraman recording a political event can be securely identified as the party responsible for recording the event / activity via his / her broadcast identification information, and such identification information can be securely bound to such recorded event information, wherein such recorded event information also includes broadcast identification information of the event / activity participants, including role type.

[0317] In some embodiments, pBIDE interactions may involve cryptographic functions and services, where, for example, a designated user and / or user category (group or class) can decrypt the pBIDE identification information IIT and / or other IIS (and / or portions thereof) of another person or group / category of individuals. Furthermore, in some embodiments, decryption of one or more portions of a corresponding pBIDE identification information set may only be performed during a given specific event / activity instance and / or type. Such cryptographic functions and services may involve one or more identity information cloud services that receive and register CIIS and / or CBEIIS information from the AFD and / or RCFD and subsequently perform EBInet device placement identification (including performing cryptographic services), including authenticating the applicable EBInet device or devices and / or associated individuals. If such device or devices and / or associated individuals are authenticated and meet any applicable specifications, such cryptographic services may provide cryptographic keys for secure pairing / grouping of such devices and / or individuals, respectively. This approach enables an EBInet device arrangement and / or associated individuals to protect sensitive information that may be transmitted due to broadcasts / polling / calls by parties that are initially unaware of each other, because it enables each party to first reliably identify / authenticate the other party before exposing such sensitive information, such identification / authentication enabling the authorized provisioning of encryption keys to the identified / authenticated parties. This identification / authentication, followed by the provisioning of keys, comprises a two-step process in which the individual, device, or individual / device pair is first identified / authenticated, which satisfies specified requirements for enabling a second set of security procedures involving the authorized secure forwarding and / or decryption of one or more additional portions of the identified information set instance.

[0318] In some such pBIDE embodiments, the ID information may be obtained via wireless communication and / or via a wired connection and may be received in the form of a biometric-based user personal identification information set and / or in the form of a composite identification information set comprising at least a partial biometric-based owner and / or user information set of proximity or quality of presence combined with an RCFD and / or other RD and / or RUS (receive and use service) arrangement identification information set corresponding to the owner and / or user. Such information sets may be carried, for example, in and forwarded (e.g., broadcast or otherwise transmitted) from the respective carrying mobile RCFD of such information sets and / or, in some embodiments, may be provided by and / or retrieved from one or more non-carrying, server-based information stores. Such an IIS instance (and / or portions thereof) may be available, for example, when carried by the RCFD and provided to a human (e.g., a device arrangement owner and / or user) or device / human presence / identity verification for event / activity authorization (e.g., opening a front door, accessing an online database, accessing an intermodal container, using EBInet EBICoin digital currency, or sending or receiving communications such as email) and / or other event / activity execution / control (e.g., using at least a portion of such IIS information for EBInet REAI IIS instance publishing). Such an IIS (or one or more portions thereof) may also or alternatively be securely bound to the associated respective REAI, and such bound IIS information and / or one or more portions thereof may be obtained from the RCFD and / or server-based information storage arrangement, respectively, where such information may be used for assessment, activity control, identification request or requirement fulfillment, and / or presence auditing related to individual and / or other REAI IIS information EBInet arrangements.

[0319] In some embodiments, such IIS and / or information representing one or more portions of such IIS may be made available in the form of one or more tokens (IITs) and / or at least partially encrypted IIS. Such tokens may, for example, be commonly broadcast to identify (e.g., identify potential candidates for) IIS and associated REAI usage opportunities, and / or such information may be securely forwarded (provided) to one or more EBInet-compliant RD arrangements in a targeted manner, where such targeting is based at least in part on one or more types of receiving device identification information attributes, such as, for example, one or more specified attributes securely carried by the receiving device's NIIPU confirming / designating that the subject IIS possesses. Such attributes may include one or more specific types of valid facts and / or qualities of fitness for purpose, where if such a receiving arrangement possesses the specific one or more attributes, the receiving device's NIIPU is permitted to decrypt and read / use one or more portions of the broadcast information set. The aforementioned attribute-dependent access to the broadcast identification and / or associated information effectively enables the secure delivery of such information to be targeted to one or more parties and / or one or more devices possessing such one or more attributes (e.g., one or more specified and testable / verifiable valid facts).

[0320] In some embodiments, when a user's RCFD is within physical proximity of one or more RD and / or RUS arrangements, identification information (e.g., IIS, such as IIT) may be broadcast and / or forwarded, as evidenced, for example, by the RD wirelessly (e.g., using Bluetooth or other short-range wireless means) projecting a generated output signal (which may be composed in part of a pseudo-random signature signal element for an unpredictable unique identification) received by the RCFD, identifying such RCFD and / or EBInet arrangement with which the RCFD user wishes to interact, and transmitting it back to such broadcast / forward arrangement to establish a round-trip time (to receive a response signal set) and verify whether the local one or more presences of the potential receiving RD arrangements are within physical proximity, such proximity parameters being securely specified by the rules and controls (e.g., permissions and identification information management specifications) of the associated such RCFD and / or other RD and / or RUS arrangements.

[0321] In some embodiments, when an RCFD is in close wireless physical (and therefore communication, e.g., Bluetooth) proximity to one or more RUDs and / or RUSs, it may make its presence (and the availability of identification information for such RCFD) known by broadcasting initial (a) non-encrypted, non-sensitive information, and / or (b) encrypted information that can be received and decrypted by authorized EBInet device arrangements, such information describing initial / introductory characterization information of such broadcasting RCFD and / or RCFD user. For example, such RCFD may broadcast an "I am here" message, or group (e.g., social interaction) interest indication, such as, "I am interested in professional tennis," or "I am a physicist and can provide valid facts regarding my PhD in physics; your IIS states / confirms that you are a physics student, graduate student, or professor; is this a testable valid factual statement?" (or, in lieu of such a question, such a valid factual statement may be tested (for authenticity) automatically or at the initiation of the inquiring party). If the RD characterizing one or more criteria is met, the broadcast of information (including, for example, the RCFD request RD and / or RD stakeholder characterization information) can be followed by secure communication between one or more RDs (which may include using one or more RCFD secure modular components (e.g., NIIPUs)) and the user carrying the RCFD (e.g., NIIPU arrangement). In such an arrangement, for example, a password-protected rights management operation can determine the suitability of forwarding (which may include reciprocating) the associated IIS information set (including, for example, the corresponding CBEIIS and / or CIIS) and / or one or more portions thereof (e.g., the child IIS device authentication information set) of the securely protected communication device. This information set can be transferred between the various isolated modular components (e.g., NIIPUs) of the EBInet-compliant device arrangement, where, for example, encryption and decryption operations can be securely performed. When represented by an unencrypted or at least partially encrypted IIT and / or other IIS instance, the broadcast and / or forwarding of this call information can be used to verify the contemporaneous or operationally simultaneous presence of the user and / or the user's receiving RD arrangement. Such broadcasting and / or forwarding can support securely forwarding / providing user and / or device deployment IIS instance information or one or more portions thereof for, for example, securely performing publishing and / or event / activity authorization and / or other controls (e.g., SVCC, digital currency transactions, social networks, documents and / or programs and / or communications, and / or other activities (including but not limited to creation, publishing, registration, monitoring, use, reading, participation, access, editing, deletion, sharing, sale / exchange, sending, receiving and / or the like)) control and / or auditing in REAI IIS.

[0322] In some embodiments, the forwarding, receipt, and / or use of IIS information associated with the pervasive IIS availability of pBIDE is securely governed, at least in part, by rules and control specifications applicable and securely implemented by participating EBInet device arrangements and / or services. Such specifications are processed in corresponding hardware and software tamper-resistant modular components (e.g., NIIPUs) and / or associated network-based service arrangements. Such IIS may include a portable (e.g., highly mobile), at least partially contemporaneous, at least partially near-presence or quality-of-presence, biometric-based identification information set that can be transparently and automatically provided without event / activity-specific user action, for contexts where there is an EBInet arrangement request or requirement for such identification information and / or where, for example, the results from a computing event / activity can be optimized due to the pBIDE availability of such information.

[0323] In some embodiments, the pBIDE arrangement supports enabling technologies for securely managing an IoT (Internet of Things) universe or other IoT (more limited in scope) arrangements. For example, such a universe may include a vast array of IoT instances (HVAC systems, drones, appliances (e.g., TVs, refrigerators), security systems and door locks, automobiles, embedded systems, wireless sensor networks, control systems, home and building automation, and / or the like), where the population of such IoT instances comprises a distributed arrangement managed at least in part by pBIDE pervasive identification information. Such an ecosystem can be managed using a structure of ecosystems and sub-ecosystems managed using identity rights, the electronic world comprising a highly diverse, commercial and human, social and personal connected computing management infrastructure, managed at least in part by biometric proximity and / or quality of presence rights and associated identity characteristics / attributes. Such an infrastructure can be managed using, for example, the fundamentally reliable subject identifiers, subject attributes, subject-related rights, and user and stakeholder contextual purpose implementation elements described herein, which together constitute a connected computing event / activity management framework.

[0324] In some embodiments, the pBIDE arrangement can be configured to automatically broadcast (e.g., periodically, and, for example, in accordance with the corresponding specifications of one or more EBInet devices) an IIS (e.g., a contextually appropriate child IIS (of a primary IIS)) used as a carried "identity wallet" that includes one or more identity attributes about the RCFD-carrying device and its carrier / user. Such an IIS can, for example, be subject to specified rules and controls and be queried as to whether one or more parties possess a particular one or more attributes (e.g., expressed as verifiable PERCos valid facts, cred assertions, and / or other at least partially securely managed metadata). Such attributes can include EFs that specify or require the broadcaster and / or recipient's employer, hobbies, organizational memberships, past and / or current occupations, skills specified by a recognized certification authority (e.g., skills specified by a recognized utility and / or certification service (e.g., an educational institution regarding the individual's degree type and field) (e.g., using EFs)), and / or the like. Such attribute broadcasts may be initiated by the carrier / user of the RCFD and / or as a result of determining / identifying the location of the RCFD, a specific address and / or general area / neighborhood (e.g., as determined by GPS and / or cellular arrangements), identifying a time instance (e.g., using a secure clock arrangement of the NIIPU), identifying a local WiFi network (e.g., the presence of a particular office building, residence, or office-related arrangement), receiving a "presence" identification information signal (e.g., IIT) regarding an individual, device, group, and / or receiving an identification information broadcast (e.g., using Bluetooth communications) of the location of an individual and / or commercial facility arrangement (e.g., a coffee shop), and / or the like. Such attribute broadcasting may also be initiated by an individual carrier / user of such RCFD, wherein such individual carrier / user specifies one or more testable attributes and / or provides one or more sets of fit-for-purpose quality assertions, and wherein the fit-for-purpose quality assertions about, for example, the broadcasting (and / or receiving) individual may have attributes asserted by a qualified authority / expert, which may be verified by valid fact-testing methods, such as MIT's stipulation that John Doe graduated with a master's degree in bioengineering, which strongly confirms that Mr. Doe has expertise in bioengineering.

[0325] In some embodiments, as a result of such a pBIDE broadcast, a similarity / equivalence match is identified by the pBIDE broadcaster's RCFD and / or the receiving RD's (e.g., RCFD) arrangement, followed by a securely managed set of processes involving additional inter-device and / or inter-user identification based on identifying one or more other shared attributes / interests. In such an arrangement, the contents of the identity wallet can be progressively revealed in a controlled and secure manner and in accordance with any relevant policies, instructions, and / or context. A determination can then be made as to whether, for example, the broadcaster's specific physical location (and / or other potentially sensitive information) regarding one or more such broadcasts and / or recipients should be revealed to one or more other parties, and / or whether, for example, one or more instances or portions of its additional IIS should be transferred. This revelation can include one or more additional steps in the initial evaluation of the broadcaster's individual and / or RCFD device and / or recipient individual and / or RCFD receiving device to assess whether to "authorize" additional information transfer and / or initiate a physical meeting (between the parties). For example, an individual carrying an RCFD could walk around at appropriate respective times / places and broadcast, "I am a member of the ACLU, an IT services manager at Amazon, middle-aged, my quality of presence identity based at least in part on biometrics has a socially anonymous identifier XXXX, and all of the foregoing are provided as verifiable valid facts."

[0326] In some EBInet embodiments, an EBInet ID second-factor identity verification device arrangement can include an IIS-carried device arrangement that pairs at least partially with an individual's biometric-based identification information to prevent theft, misuse, and unauthorized modification (ATMUM) of the individual's identity information. This second-factor device arrangement can be paired with an EBInet RCFD to form a tethered device arrangement that provides assurance that the set of personal identification information forwarded by the RCFD effectively verifies the individual's presence (e.g., using a tamper-resistant and inspection-resistant NIIPU). This ATMUM arrangement can function as a secure pairing arrangement that can be securely registered with its associated RCFD as a secure inter-device / pairing arrangement. For example, a management network-based service can be used to register an ATMUM / RCFD device set, and / or such pairing can be managed through mutual registration of such devices, with each such device identifying its corresponding counterpart as a registered partner device. This paired, registered, cooperative arrangement can be securely implemented as a tethered identity verification device arrangement.

[0327] Such an ATMUM tethering / verification device arrangement may comprise a highly portable device in the form of a fob or wallet card that provides second-factor biometric identification and presence information verification of proximity or quality of presence, wherein the ATMUM device arrangement is cryptographically associated with an EBInet modular component included in an RCFD arrangement (such as an EBInet RCFD including a NIIPU modular component), which is included in a parent EBInet-compliant smartphone, smartwatch, or similar device arrangement. Such a partner device arrangement may comprise a "parallel" identification information carrying and forwarding arrangement that provides confirmation (e.g., personal identification confirmation / verification) that the same individual is carrying such a partner device arrangement, wherein the biometric identity received and carried by such a device identifies the same individual (and may have been operationally obtained simultaneously from the same AFD). The corresponding personal identification information of such a device includes, at least in part, contemporaneous corresponding identification information that is at least in part biometric-based and represents identification information of proximity or quality of presence. Such compared identification information is carried by both partner device arrangements. This anti-theft and personal presence confirmation device arrangement—e.g., a fob or card (or pin / brooch, etc.) used as a second-factor personal identity authentication arrangement—can confirm the contemporaneous identification information of an individual carried and / or forwarded by a primary identification information providing EBInet device arrangement, such as an RCFD. This RCFD and ATMUM device arrangement can use the same (and / or different (e.g., confirming)) AFD as one or more sources of biometric identification information acquisition, securely and operatively acquiring their respective individual's biometric identification information from the AFD simultaneously (or at different times). This RCFD and ATMUM device arrangement securely supports the availability of such identification information as a second factor of such information reliability assurance arrangement. The information provided by this second-factor ATMUM device arrangement can, for example, perform identification information forwarding and / or confirmation operations independently of its paired first-factor parent intelligent device embedded NIIPU modular component, the RCFD arrangement. Such ATMUM device and such RCFD arrangement may from time to time (e.g., periodically) compare the IIS information they each carry to ensure that they are carrying contemporaneous biometric-based identification information identifying the same individual, and / or such arrangement may forward at least a portion of their respective biometric-based personal identification information to the RUD and / or RUS network identity integrity assurance service to confirm that the personal identification information carried and forwarded by the RCFD is carried by and on behalf of the individual it identifies (and that the information carried by such RCFD is not carried by an alternate individual and / or arrangement, and / or that such RCFD first factor information has not been modified in an unauthorized manner).

[0328] In some embodiments, such ATMUM and RCFD pairing supports one or more EBInet identification information sets used in event / activity authentication, authorization and / or control. Such pairing helps ensure that the party using RCFD has been reliably and securely (e.g., accurately) identified as the IIS forwarding party (e.g., to the RUD arrangement). As a result, the individual and / or individual / device composite information identified by the paired ATMUM device and RCFD arrangement can be evaluated by the RUD and / or RUS for identity integrity assurance to ensure that the information sets forwarded by the two paired devices respectively identify (at least partially biometrically and using near-presence or presence quality identification information) the same individual. The identity integrity assurance service can also ensure that any other required identification information attributes match and / or otherwise meet specifications, such as time, date, location, and / or ensure that, for example, the user's individual's biometric identification information and / or the AFD arrangement that obtained such information matches. Both device arrangements can be verified as carrying the same or appropriately corresponding personal and / or personal / device (and / or service) identification information (e.g., CIIS and / or CBEIIS), including, for example, the same information regarding acquisition of the identification information, such as time, date, location and / or the like.

[0329] In some embodiments, the RCFD can securely receive at least a portion of biometrically acquired personal identification information and / or identification information derived therefrom (e.g., an EBInet IIS). Such information receipt can be securely timestamped with the RCFD's receipt time and / or the AFD creation and / or forwarding time of one or more instances of such information. Such identical information and / or a security token representing at least a significant portion of such information can be provided to both such a secure mobile EBInet RCFD arrangement and a second arrangement at substantially the same time or operatively simultaneously, wherein such second arrangement can be an IIS carrying device arrangement, such as an electronic, battery-powered and secure, wirelessly communicating wallet card or key fob or pin / brooch or belt clip device, such as a securely hardened EBInet version of an electronic key arrangement for unlocking a car. Such a card or fob (or pin / brooch, bracelet, or other carried / worn device) may be kept on the person of the user or otherwise carried / worn in such a manner that theft or other loss of such fob, wallet card, pin / brooch, bracelet, or other device such as a RCFD (authentication device) is unlikely to occur concurrently with theft or loss of its paired EBInet device because, for example, such fob or wallet card and such paired device are carried and / or worn by the user as separate / distinct and differently positioned devices. For example, such authentication device may be carried in a pocket, or may be attached to clothing, or worn as a band such as a wristband, or comprise an eyeglass assembly, or such second factor arrangement may be embedded / securely isolated in a smartwatch (or, for example, securely carried by an embedded NIIPU modular assembly chip of a secure card carried in the user's wallet and / or other mobile parent device arrangement). Such a second factor carrying and forwarding arrangement may be redundantly and separately supported in an embedded modular component, such as a securely isolated RCFD / NIIPU arrangement, which may perform validation / augmentation / authentication of EBInet identity functionality as a primary and / or secondary set of functions on a mobile carried smart device, arrangement, and wherein in some embodiments such verification device may communicate directly with other EBInet devices and / or remote / external service arrangements to provide, for example, authentication / matching / validation of identification information.

[0330] In some embodiments, the EBInet RCFD master IIS and / or one or more child IISs are secure, ubiquitous, and transparent, and can be used for identity-related purposes. Such IISs can each be securely bound to their corresponding subject resources and / or resource interfaces. Such IISs can include respective resources, such as information instances of their own respective IIS instances. Such a master and / or one or more child IIS sets can include instances of a virtually unlimited population of diverse and varied intangible and tangible resources. For example, such IISs can identify and describe their corresponding subject instances, such as sets of identity information that identify and characterize a specific individual.

[0331] In some embodiments, using, for example, specified inferences, cores, and / or other PERCos contextual purpose expressions, IISs can be associated with one or more corresponding specified purposes. Such expressed purposes can be identified as being associated with one or more subject resources using any applicable, at least partially biometrically based, at least partially approximation of presence or quality of presence, one or more IISs, wherein such IISs each include and / or securely reference a REAI representing one or more standardized and interoperably interpreted subject attributes / attribute categories / types. In some embodiments, such IISs can be used to determine the optimality, usability, and / or suitability of resources and / or events / activities for a particular purpose (e.g., evaluating an individual contextually including a resource as a consultant with expertise in a given subject). Such IISs, such as IITs, can also be used to determine whether a resource is authorized to interact with one or more other resources (e.g., determining whether a person has the right (e.g., authorization) to use a particular, e.g., web-based resource, and / or participate in a particular event / activity and / or use a resource at a particular event / activity, such as permissions derived from resource ownership or other securely specified relationships with the resource (e.g., access and / or operation of a vehicle, use of digital currency in a transaction, removal of a cargo box from a SIMC, and / or the like).

[0332] In some embodiments, at least a portion of a REAI event / activity involves multiple parties exchanging at least partially biometric identification information that approximates presence or quality of presence, for example, in the form of an IIT (such as a CIIS IIT), including information regarding each of the parties' respective event / activity-related permissions and / or other relevant one or more attributes. In this case, for example, two users can securely transmit (e.g., exchange using their respective EBInet-compliant device arrangements) policy-managed IIS information, at least partially encrypted, between their respective smart devices, such as smartphones, laptops, tablets, smartwatches, and / or other EBInet-compliant smart devices. Using such IIS information, each (or one) user can authenticate the true identity and presence of one or more other parties who are prospective participants in the communication group (or who are being evaluated as to whether they should be participants in the communication group (e.g., one or more parties who have been selected, approved, and / or authenticated)).

[0333] In some embodiments, users and / or their respective computing arrangements—using, for example, the user's / arrangement's respective EBInet smart device arrangements and / or using an EBInet-specific device arrangement embedded with the NIIPU secure isolation processing module component, and / or respective EBInet-compliant identity platform service(s)—can assess the authenticity of respective candidate resources and / or parties participating or potentially participating in an event / activity. For example, candidate and / or participating users and / or their EBInet devices and / or service arrangements can utilize the authenticator's fit-for-purpose qualities and / or valid fact attributes, wherein such users and / or EBInet devices and / or service arrangements can assess the suitability of one or more candidate and / or participating resource instances (e.g., people and / or device arrangements) for such instances to directly and / or indirectly participate in the user's respective event / activity.

[0334] In some embodiments, EBInet subject events / activity instances may include / involve, for example, email, text, video conferencing, manufacturing of electronic devices and components, performing transactions using digital currency, publishing software programs and video presentations, controlling IoT devices, managing SVCC-related activities, social and / or business networking including affinity group computing-related events / activities (e.g., communication interactions), publishing content (e.g., publishing IIS instances), and / or the like (event / activity instances). One or more E / A-related IISs may be carried by RCFD and, through the exchange of security identification information, make devices and / or service arrangements that comply with EBInet specifications selectively or universally available, thereby achieving corresponding verification / authentication and / or authorization and / or other controls.

[0335] Computer security, rights management, targeted computing optimization, and the like currently rely on weak, specific human identification; this often results in problematic computing, such as inefficient, unproductive, and / or untrustworthy computing. The EBInet embodiments described herein provide greatly improved computing identity information reliability, practicality, cost-effectiveness, informativeness / applicability, and ease of use, based in part on human identification based on proximity to presence and / or quality of presence and associated computing resource and / or event / activity instance attribute information.

[0336] Despite the fact that such information can be valuable and sometimes essential for ensuring computer security, optimizing purposeful computing, and reliably implementing computing event / activity authorization and user / participant fitness for purpose enforcement, there are various reasons for the failure today to use human-specific, at least partially biometric-based and / or otherwise "anchored / grounded" identification information to securely provide resource and / or event / activity suitability information.

[0337] Reasons for failing to use such identification information based at least in part on biometrics include, but are not limited to:

[0338] A. Failure to identify the root importance of specifically identifying individuals who are responsible for and / or otherwise associated with (e.g., attesting to) resources and / or event / activity instances in an unequivocal and reliable manner, and failure to develop practical methods for doing so. Failure to evaluate (e.g., identify) such specific individual REAI participation instances based on their associated respective applicability implications based on specific individual associations / characteristics (e.g., associated individual intentions and capabilities) reflects:

[0339] a) fails to identify the commercial importance of achieving biometric identification of individuals with near presence and / or presence,

[0340] b) Failure to develop commercially practical methods to achieve near-presence and / or presence quality biometric identification of individuals. Accuracy and reliability limitations of current biometric identification technologies make small, cost-effective, portable, and highly accurate biometric identification arrangements infeasible, and, therefore, biometric identification currently performed by portable devices is susceptible to malicious spoofing and / or other impersonation. To date, network security trustworthiness and contextual adaptability of resources, processes, and events / activities have been hampered by the lack of practical methods for commercially reasonable implementation of personal identification tools that ensure the authenticity (e.g., assertion or otherwise representation) of human identity. The performance of biometric identification systems has been hampered by considerations such as cost, size, packaging, availability, power consumption, and redundancy (where, for example, implementations may require many, if not every, user computing devices, such as smartphones, tablets, computers, smartwatches, IoT devices, and / or the like, to perform personal identification with near-presence or presence quality accuracy). In particular, it is not yet technically feasible to widely and commercially implement reliable presence capabilities in highly mobile device types such as smartphones, smart watches, smart bracelets, smart pendants, and / or the like, and

[0341] c) Failure to recognize the informational importance of securely combining such personal biometric identification of near presence and / or quality of presence with the individual's respective, standardized and interoperably interpretable descriptive attributes (e.g., such attributes in the form of verifiable facts and / or fit-for-purpose quality attribute assertions attested by the individual (CertPer)).

[0342] This failure to recognize and implement such identity and attribute arrangements (including, for example, purposeful computational attributes) significantly limits the ability of computer users and computing arrangements to identify and / or manage:

[0343] a) the best resources for such computing user's corresponding purpose (e.g., identifying both resource opportunities and resource usage outcomes related to the desired purpose),

[0344] b) cybersecurity threats (e.g., computer security, internet security, and mobile security threats),

[0345] c) threats to the communication process (such as information theft and / or illegal modification of communication information),

[0346] d) the best, most appropriate and / or otherwise suitable social and / or business networking interaction opportunities,

[0347] e) auditing, integrity protection, and / or event / activity governance of supply, value, and / or other business chains associated with human identities (e.g., rights management rules and controls, including, for example, event / activity authorization),

[0348] f) “fake” news and / or false stated information (e.g., presented as fact or sound theory (including, for example, fabricated and / or improperly manipulated news, science and / or facts, such as presented in video and / or audio format and / or provided in text form)), and

[0349] g) Digital currency theft and fraud.

[0350] In some embodiments, such limitations can be addressed at least in part by providing highly reliable information about, for example, the trustworthiness, reliability, motivation, competence, and / or authority of REAI stakeholders. For example, such information can be provided by securely binding human-specific identification information based at least in part on biometrics (with near-presence and / or presence quality reliability) to identity-related attributes. Such attributes can include one or more of the following:

[0351] 1. Descriptive facts associated with an individual, e.g., testable valid facts such as age, gender, group membership, education level(s), occupation, affiliation, and / or employer, where, for example, one or more such attributes can be expressed as a verifiable set of information, such as John Doe works as a Senior Engineer at IBM, as specified on IBM's securely accessible website. Such descriptive facts may include, for example, other computing resource and / or event / activity instance-specific identifying information elements, such as a unique instance identifier (embedded secret information, passport number, home address, website address, DOI number, and / or other unique identifier(s) associated with the instance), revision (e.g., version) number, model identifier, time, date, physical location, historical provenance, and / or the like,

[0352] 2. a quality measure of fitness for purpose (e.g., for trustworthiness, capability, cost), expressed by at least a partial purpose expression (e.g., PERCos credit) and an associated relative fitness for purpose quality value (e.g., a quantitative value associated with a corresponding standardized purpose expression),

[0353] 3. Identity-related permissions (authority specifications associated with an identity), and

[0354] 4. Identity-based human-specific interests (e.g., provisions that inform personal interests regarding an individual's activity goals, such as an interest in cooking, basketball, studying astrophysics, and / or the like, where such interests can, for example, be specified as contextual purpose expressions).

[0355] B. Failure to address user and societal concerns about user privacy being compromised by the theft and subsequent misuse of personal biometric identification information. This privacy concern can be addressed, at least in part, by using identification capabilities that accurately verify presence and liveness. For example, in some EBInet embodiments, stolen biometric pattern information cannot be misused to falsely indicate the presence of a given individual, as only the actual presence of a given individual is considered valid.

[0356] To mitigate privacy concerns regarding historical biometric information, for some embodiments, this specification describes support for biometric identification information deployment using biometric identification-related anonymization management techniques, wherein specific identification information instances of unique humans are cryptographically protected, and attribute information is managed by rules and controls to prevent the inappropriate release of sensitive information, such as socially unique identification information. In some embodiments, such identification information instances are securely associated with corresponding trustworthiness and / or other suitability-related attributes of such humans. Such attributes may include, for example, (a) PERCos credit, EF, and / or other personal characterization attributes of CPE, and / or (b) identification information for respective resources and / or event / activity instances of humans (e.g., EBInet device deployment stakeholders and / or users), such as the identification information of their respective EBInet-compliant RCFD smartphones. Utilizing such anonymization technology embodiments, real-world names, address(es), contact information, and / or other privacy-sensitive information may be at least partially absent and / or unavailable (e.g., except under the control of highly precise, context-specific, secure access mechanisms). As a result of this capability, various PERCos and / or EBInet embodiments can significantly mitigate the consequences of theft of PERCos and / or EBInet personal-specific biometric pattern identification information, particularly with respect to a user's most important privacy information variables.

[0357] One recently launched effort to specifically examine the challenges of biometric liveness is the IARPA Odin program, whose publicly stated focus is, at least in part, to identify dynamic properties of biometric liveness to be used in anti-spoofing analyses.

[0358] In some EBInet embodiments, to mitigate or eliminate individual-specific biometric identification spoofing, various reality integrity systems and methods are employed. Such systems and methods employ reality integrity testing that utilizes (1) physical compliance rules, (2) individual live presence verification, and / or (3) the presence and / or absence, location, and / or motion (e.g., dynamics) of one or more tangible non-human object sets and / or object set characteristics (e.g., spectral signatures).

[0359] In some embodiments, an EBInet acquisition and forwarding device arrangement (e.g., an AFSD) operates as a biometric identification acquisition and forwarding device arrangement that approximates presence and / or quality of presence, wherein such arrangement identifies and / or authenticates (e.g., verifies) and / or otherwise determines with a very high level of confidence the actual presence of a particular human being identified by the biometric. Such identification (and / or authentication) processing may include, for example, securely performing identity authentication (identification of a particular human being) and presence authenticity verification, which involves (i) acquiring identification information that approximates presence and / or quality of presence, at least in part based on biometrics, and ensuring the presence of a particular human subject; and (ii) processing at least a portion of such acquired information set to generate a biometric identification information set for such particular human subject for at least one of (a) auditing, (b) identification, (c) authorization, (d) assessment, (e) portability, (f) governance, and / or (f) other processing information set associated with a resource and / or event / activity instance, wherein such information set may be used for event / activity computing process management, respectively.

[0360] In some embodiments, to approach the reliability of identification of presence or presence, the EBInet system (which uses biometric acquisition to perform identification of an individual to produce a set of information that uniquely distinguishes that individual from all others) verifies, invalidates, and / or provides a risk analysis (e.g., using a reality integrity test) of the likelihood of invalidity or validity of the physical presence of a particular identified human. Such an identification process set may include operable to simultaneously test the presence of such a biometrically "identified" human. Such a biometrically identified individual (if so determined) whose presence is verified (e.g., verified through internal operations of the RIIPU arrangement) can be securely registered if not previously registered with an authority such as a cloud identity service, or, if previously registered, the biometric (and / or at least partially biometric-based) identification information acquired by the individual can be matched and authenticated with a previously registered instance of identification information stored within and using the registration and authentication service of such an authority.

[0361] In some EBInet device deployment embodiments, this presence validity testing technique includes one or more methods and systems including:

[0362] 1. Human activity detection analysis, as discussed herein. For example, further discussion herein describes signature acquisition techniques that utilize one or more physiological information collection techniques to generate corresponding sets of spatial, temporal, and / or spectral information in response to an emission;

[0363] 2. Timing anomaly analysis, such as determining timing inconsistencies between electromagnetic emissions and corresponding sensed events; and

[0364] 3. Anomaly analysis of elements of the biometric acquisition environment, such as identifying the presence of potentially suitable / appropriate environmental elements and / or the presence of potentially unsuitable / inappropriate elements (e.g., logically determined and / or specifically designated as unsuitable), or the presence of clearly inappropriate (e.g., unfamiliar and / or otherwise uncertain) one or more of the following:

[0365] (a) tangible physical objects (e.g., inanimate (such as a virtual reality emitting device arrangement) and / or animate tangible instance arrangements), including, for example, their dynamic properties,

[0366] (b) materials / chemicals / biological substances, and / or

[0367] (c) event / activity instance;

[0368] and / or any other sensor-sensed environmental elements and / or anomaly analysis associated with physical laws.

[0369] In some embodiments, PERCos resource identity information arrangements and identity assessment capabilities are based at least in part on a highly reliable set of resource identifiers, generated, for example, at least in part, using rigorous identity technology. Such technology may include rigorous biometric identification capabilities, enabling the reliable establishment, maintenance, and subsequent authentication of resource identities. Such participant identity instances may be associated with identification information sets of associated CertPers and / or other stakeholders for one or more resource sets, where such stakeholders are identified, for example, by identification information sets based at least in part on biometric proximity and / or quality of presence, such as using liveness testing, or their respective identification information sets are confirmed. Such identification information sets may include quantitative and / or semi-quantitative information components that convey spatial, temporal, and / or spectral information describing a person's interaction with light and / or sound. For example, unpredictable emitted light provided to a human organ element / arrangement may be at least partially spatially, temporally, and / or spectrally patterned and used in conjunction with a corresponding set of acquisition processes. Such light may include unpredictable emission light patterns and frequency intensities that are unique to the set of biometric information acquisition processes. In some embodiments, these techniques can, at least in part, enable unique and unforgivable determination of 3D topography and / or tissue depth information regarding a tissue's (a) physical structure; (b) qualitative and / or quantitative chemical composition; and / or (c) periodic and / or non-periodic dynamics, wherein the foregoing, alone or in combination, can provide highly stringent assurance of the presence of a specific human identity and / or activity, and which can be inhibited to operably eliminate susceptibility to known (and / or otherwise feasible) presentation attack methods.

[0370] When combined with, for example, timing anomalies and / or biometric challenge and response and / or similar presence biometric analysis techniques, an at least partially biometric-based set of identification information about proximity and / or quality of presence can be presence reliable, and wherein such biometric information can be augmented by environmental and / or historical behavioral related pattern information, and by other rigorous biometric techniques such as, for example, human chemical molecular pattern set odor sniffing, protein profiling, DNA profiling and / or other biometric assessments. Such one or more rigorous identity assessment techniques can be further augmented by and / or alternatively using challenge response, multi-factor and / or other rigorous, such as presence biometric and / or user computing deployment environment techniques, sufficient to achieve a stringent assurance level required by the context and / or as spe...

Claims

1. A system for determining biometrically assessed human activity and a corresponding identity of an individual, the system comprising: A computing arrangement comprising at least one processor and associated memory, wherein such computing arrangement is configured to enable: obtaining personal identification pattern information from a biometrically assessed human body feature arrangement using a biometric signal sensing and signal information processing arrangement for a biometric identification information enrollment process set; Using a secure clock arrangement and a signal sensing and signal information processing arrangement for a biometric identification information enrollment process set, measuring the timing of at least one set of dynamic biological processes occurring at a first location on an enrollment human body and the timing of one or more corresponding sets of dynamic biological processes occurring at one or more other locations on such human body; determining timing relationship information for such set of biological processes at such first and one or more other body locations based on such registered timing measurements of such set of one or more physical events for such set of biological processes, wherein such timing relationship information is configured for subsequent use during the set of authentication processes to determine whether a tangible object presented for biometric assessment represents a living, physically present identified human being; associating such personal identification pattern information with activity-information information at least in part by deriving pattern and timing information from the same and / or related, inherently related sets of information generated by operatively interrelated anatomical elements and / or physiological processes; For a set of authentication processes for a tangible object presented as an arrangement of human features, securely binding (a) information characterizing a timing relationship of a set of physical event processes at locations corresponding to a first and one or more other body locations of such enrolled human being and (b) personal identification pattern information corresponding to the locations; comparing (a) the similarity of the timing relationship activity information obtained for the registration process set with the timing relationship related information obtained for the authentication process set, and comparing (b) the similarity of the personal identification pattern information of the registration process set with the personal identification pattern information of the authentication process set; determining whether such set of authentication processes for the presented tangible object produces information that matches similarity to information obtained from a registered arrangement of living human features, This is accomplished by meeting one or more thresholds for a desired similarity match for such (a) timing relationship information and (b) human feature arrangement personal identification pattern information; and A set of personal identification related processes are securely governed based on such authentication determinations.

2. A system according to claim 1, wherein measuring the timing of such a set of dynamic biological processes includes obtaining timing relationship information about corresponding (a) photoplethysmogram (PPG), (b) spot plethysmogram (SPG), (c) electrocardiogram (ECG), (d) thermal state and / or changes, and / or (e) spatial frequency domain imaging data (SFDI), such timing information being obtained from such a first position of the human body and one or more other positions of the human body.

3. The system of any of the preceding claims 1-2, wherein measuring the timing relationship information about the set of dynamic biological processes comprises measuring location-specific timing of blood flow through the vasculature.

4. A system according to any of the preceding claims 1-3, wherein the secure clock arrangement and the signal sensing and signal information processing arrangement are configured to measure location-specific timing of blood flow through the vascular system.

5. The system according to any one of the preceding claims 1-4, wherein the set of dynamic biological processes is at least partially periodic.

6. The system according to any one of the preceding claims 1-4, wherein the set of dynamic biological processes is at least partially non-periodic.

7. The system of claim 5, wherein the set of dynamic biological processes is at least partially non-periodic.

8. The system of claim 5, wherein determining the timing relationship information about the set of periodic dynamic biological processes comprises determining one or more phase relationships of the set of processes at the first and one or more other body locations of the human body.

9. A system according to any of the preceding claims 1-8, wherein measuring the timing of such a set of dynamic biological processes includes obtaining timing relationship information about the observed signal intensity, wavelength, polarization and / or structural relationship related to the position sensed by one or more optical sensors, ultrasonic sensors, capacitive sensors and / or thermal sensors.

10. The system according to any of the preceding claims 1-9, wherein for biometric identification information registration, during such personal identification information acquisition, such personal identification information includes and / or is securely bound to liveness information about such individual.

11. A system according to any of the preceding claims 1-10, further comprising enabling use of such biometric identification information and / or information derived therefrom by enabling such information to be securely bound to one or more securely maintained certificates of such an individual and / or one or more other securely maintained factual attributes representing the individual.

12. The system of any of the preceding claims 1-11, wherein the set of dynamic biological processes comprises one or more portions of one or more sets of dynamic biological processes.

13. The system of any of the preceding claims 1-12, wherein the body position comprises (a) a location and / or (b) a continuum of one or more body positions.

14. A system according to any of the preceding claims 1-13, wherein biometric assessment of such body feature arrangement includes obtaining information about one or more blood vessels, irises, retina, other facial components, hands, wrists, skin components and / or one or more portions of fingerprints.

15. A system according to any of the preceding claims 1-14, wherein acquiring such biometric identification information comprises performing acquisition of biometric identification information of a human's proximity presence or quality of presence within an enclosure consisting of at least three walls and at least one environmental anomaly sensing arrangement.

16. The system of claim 15 further enabling the use of at least one sensor to safely monitor the introduction of a tangible object exhibiting an arrangement of human features into such an enclosure.

17. The system of claim 15 further enables use of at least one sensor arrangement embedded in or attached to the housing wall to enable determination of whether an object inserted into the housing is a real human feature arrangement, and / or an abnormal, inappropriately present object.

18. A system according to any of the preceding claims 1-17, further enabling the use of a secure clock arrangement within such biometric signal sensing and signal information processing arrangement to time and / or date stamp information sets of one or more acquisition and / or authentication process sets.

19. The system of any of the preceding claims 1-18, wherein securely managing the set of personal identification related processes includes using such biometric identification information and / or information derived therefrom at a time contemporaneous with acquisition of such biometric identification information.

20. The system of any of the preceding claims 1-19, wherein acquiring such biometric identification information comprises generating biometric identification information that approximates presence or a quality of presence.

21. A system for acquiring, authenticating and managing internet computing security identification information, the system comprising a hardware and software arrangement, the hardware and software arrangement comprising: A personal biometric identification information acquisition arrangement of at least one secure computing hardware and software in close presence or quality of presence; One or more secure human biometric identifiers and associated attributes information cloud service registration and management arrangements; one or more secure computing hardware and software arrangements configured to carry and forward human biometric identification information and / or information derived at least in part therefrom; as well as one or more secure computing hardware and software arrangements configured to receive and use human biometric identification information and / or information derived at least in part therefrom, Wherein this arrangement set is configured to enable: Acquiring human proximity presence or quality of presence biometric identification information through such secure, tamper-proof proximity presence or quality of presence personal biometric identification information acquisition arrangement; registering such human's acquired biometric identification information of proximity presence or quality of presence and / or information derived at least in part therefrom with one or more such cloud service registration arrangements; receiving, by such carrying and forwarding arrangement from such close presence or quality of presence personal biometric identification information acquisition arrangement, such close presence or quality of presence biometric identification information and / or information derived at least in part therefrom, wherein such carrying and forwarding arrangement then carries such identification information and / or information derived at least in part therefrom; performing a similarity match analysis that compares the acquired set of personal biometric identification information to a previously registered set of biometric identification information of the human being to authenticate the identity of the individual requesting to be allowed to perform authorized use of the tamper-resistant reception and use arrangement; obtaining, by such carry and forward arrangement, biometric identification information operatively concurrently used by a second factor, wherein such second factor identification information and / or information derived at least in part therefrom is evaluated for similarity matching with such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom to determine that such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom and such second factor operatively concurrently biometric identification information and / or information derived therefrom identify the same person; and Based on the corresponding results of one or more such similarity matches, determine whether to allow one or more operations to be performed by at least one of (a) one or more such carrying and forwarding arrangements, (b) one or more such receiving and using arrangements, and (c) one or more receiving and using cloud service arrangements.

22. A system according to claim 21, wherein such a set of hardware and software arrangements is configured to use trusted computing isolation and cryptographic technology to perform sensitive operations on identification information, wherein (1) the acquisition arrangement, (2) the carrying and forwarding arrangement, and (3) the receiving and using arrangement respectively adopt tamper-proof hardware identification information processing arrangements that support secure processing and storage of identification information.

23. The system of any of the preceding claims 21-22, further comprising a personal identification information acquisition arrangement comprising an opening on at least one side of a tangible container, wherein one or more biometric sensors and / or transmitters are arranged integrated within and / or on multiple walls of the container.

24. The system of any of the preceding claims 21-23, further comprising a personal identification information acquisition arrangement comprising an opening on at least one side of a tangible container, wherein one or more biometric sensors and / or transmitters are arranged integrated within and / or on a wall of the container.

25. A system according to any of the preceding claims 21-24, wherein such biometric identification information of human proximity or quality of presence is securely bound to personal suitability-informing attribute information.

26. A system according to claim 23 or 24, wherein one or more sensor arrangements employing such a container enable acquisition of signal information which can be used to detect timing anomalies associated with virtual and / or augmented reality object representation spoofing.

27. A system according to claim 23 or 24, wherein the container arrangement employs one or more transmitter and sensor arrangements that are at least partially used to detect the internal environment of the container for the presence of one or more tangible objects to determine at least one of: (a) the presence of human tangible components and (b) the inappropriate presence of one or more non-human tangible component deceptive elements.

28. A system according to claim 23 or 24, wherein the transmitter and sensor arrangement uses electromagnetic radiation and / or acoustic radiation.

29. The system of claim 25, wherein the human attribute information comprises, at least in part, one or more verifiable credentials characterizing corresponding one or more individual stakeholders in the digital and / or physical entity to determine suitability for use of the entity.

30. The system of claim 25, wherein the human attribute information comprises, at least in part, one or more valid facts characterizing corresponding one or more individual stakeholders in a digital and / or physical entity to determine suitability for use of the entity.

31. A system according to claim 21, 29 or 30, wherein the suitability notification information about the entity's stakeholder individual includes attribute information, which is specified as a quantified contextual purpose expression securely associated with a biometric identification of the proximity presence or quality of presence of such stakeholder.

32. A system according to any of the preceding claims 21-31, wherein securely registering such proximity or presence biometric identification information and / or information derived at least in part therefrom is performed operationally simultaneously with acquisition of such biometric identification information, and wherein such registration employs at least one of, and the registration information is securely stored within at least one of: such (a) acquisition arrangement, (b) receiving and carrying arrangement and / or (c) one or more cloud registration service arrangements.

33. A system according to claim 32, wherein authentication of such personally acquired biometric identification information of proximity to presence or quality of existence and / or information derived at least in part therefrom is performed by similarity matching such personally acquired biometric identification information of proximity to presence or quality of existence and / or information derived at least in part therefrom with previously acquired and registered such personal identification information stored in such acquisition arrangement, carrying arrangement and / or cloud service.

34. A system according to claim 21, 29 or 30, wherein such biometric identification information of near presence or quality of presence and / or information derived at least in part therefrom includes and / or is otherwise securely bound to device identification secret information to form a fused or otherwise securely combined device / personal identification information set.

35. A system according to claim 34, wherein the fused or otherwise securely combined device / personal identification information set includes at least one of the factually verifiable information sets specified by the stakeholders and / or the fact authority of the device.

36. A system according to any of the preceding claims 21-35, wherein the personal biometric identification information acquisition arrangement comprises a hardware-based acquisition and forwarding device arrangement securely employing one or more RIIPU root identification information processing units.

37. A system according to any one of claims 21-36, wherein the personal biometric identification information acquisition arrangement includes one or more secure carrying and forwarding computing hardware and software arrangements, which adopt one or more NIIPU network identification information processing units for securely carrying and forwarding human biometric identification information and / or information at least partially derived therefrom.

38. A system according to any one of the preceding claims 21-37, wherein the personal biometric identification information acquisition arrangement comprises: (a) A hardware-based acquisition and forwarding device arrangement employing one or more RIIPU root identity information processing units; and (b) such one or more secure carry and forward computing hardware and software arrangements, employing one or more NIIPU network identification information processing units, for securely carrying and forwarding human biometric identification information and / or information derived at least in part therefrom.

39. A system according to any of the preceding claims 21-38, wherein such one or more secure computing hardware and software arrangements for securely receiving and using human biometric identification information and / or information derived at least in part therefrom include one or more NIIPU network identification information processing units.

40. A system according to any of the preceding claims 21-39, wherein one or more secure clocks within the personal biometric identification information acquisition arrangement are used to time and / or date stamp information sets of one or more acquisition and / or authentication process sets.

41. A method for determining whether a presented object represents a living, biometrically identified, specific human being, the method comprising: By using a hardware and software computing arrangement including at least one processor and associated memory, one or more resources and / or specifications for determining biometrically assessed human activity and corresponding identification of an individual are provided that are at least partially standardized, wherein such provision enables: obtaining personal identification pattern information from a biometrically assessed human body feature arrangement using a biometric signal sensing and signal information processing arrangement for a biometric identification information enrollment process set; Using a secure clock arrangement and a signal sensing and signal information processing arrangement for a biometric identification information enrollment process set, measuring the timing of at least one set of dynamic biological processes occurring at a first location on an enrollment human body and the timing of one or more corresponding sets of dynamic biological processes occurring at one or more other locations on such human body; determining timing relationship information for such set of biological processes at such first and one or more other body locations based on such registered timing measurements of such set of one or more physical events for such set of biological processes, wherein such timing relationship information is configured for subsequent use during the set of authentication processes to determine whether a tangible object presented for biometric assessment represents a living, physically present identified human being; associating such personal identification pattern information with activity-information information at least in part by deriving pattern and timing information from the same and / or related, inherently related sets of information generated by operatively interrelated anatomical elements and / or physiological processes; For a set of authentication processes for a tangible object presented as an arrangement of human features, securely binding (a) information characterizing a timing relationship of a set of physical event processes at locations corresponding to a first and one or more other body locations of such enrolled human being and (b) personal identification pattern information corresponding to the locations; comparing (a) the similarity of the timing relationship activity information obtained for the registration process set with the timing relationship related information obtained for the authentication process set, and comparing (b) the similarity of the personal identification pattern information of the registration process set with the personal identification pattern information of the authentication process set; determining whether such set of authentication processes for the presented tangible object produces information that matches similarity to information obtained from a registered arrangement of living human features, This is accomplished by meeting one or more thresholds for a desired similarity match for such (a) timing relationship information and (b) human feature arrangement personal identification pattern information; and A set of personal identification related processes are securely governed based on such authentication determinations.

42. A method according to claim 41, wherein such provision also enables measurement of the timing of such set of dynamic biological processes to include obtaining timing relationship information about corresponding (a) photoplethysmogram (PPG), (b) spot plethysmogram (SPG), (c) electrocardiogram (ECG), (d) thermal state and / or changes, and / or (e) spatial frequency domain imaging data (SFDI) data, such timing information being obtained from such a first position of the human body and one or more other positions of the human body.

43. A method according to any of the preceding claims 41-42, wherein the providing enables measurement of the timing relationship information about the set of dynamic biological processes to characterize the location-specific timing of blood flow through the vasculature.

44. A method according to any of the preceding claims 41-43, wherein such provision also enables configuration of such a secure clock arrangement and signal sensing and signal information processing arrangement to measure location-specific timing of blood flow through the vascular system.

45. The method according to any of the preceding claims 41-44, wherein the providing further renders the set of dynamic biological processes at least partially periodic.

46. ​​The method according to any of the preceding claims 41-45, wherein the providing further renders the set of dynamic biological processes at least partially non-periodic.

47. The method of claim 45, wherein the providing further renders the set of dynamic biological processes at least partially non-periodic.

48. A method according to claim 45, wherein such provision also enables determination of such timing relationship information about the set of periodic dynamic biological processes to include determining one or more phase relationships of such set of processes at such first and one or more other body locations of the human body.

49. A method according to any of the preceding claims 41-48, wherein such provision also enables measurement of such timing of such set of dynamic biological processes to include obtaining timing relationship information about position-related observed signal intensity, wavelength, polarization and / or structural relationships sensed by one or more optical sensors, ultrasonic sensors, capacitive sensors and / or thermal sensors.

50. A method according to any of the preceding claims 41-49, wherein for biometric identification information registration, such provision also enables such personal identification information to be included and / or securely bound to liveness information about such individual during such personal identification information acquisition.

51. A method according to any of the preceding claims 41-50, wherein such provision enables use of such biometric identification information and / or information derived therefrom to include securely binding such information to one or more securely maintained credentials of such an individual and / or one or more other securely maintained factual attributes representing the individual.

52. The method of any of the preceding claims 41-51, wherein the providing enables the set of dynamic biological processes to include one or more portions of one or more sets of dynamic biological processes.

53. A method according to any of the preceding claims 41-52, wherein the providing enables the body positions to include (a) positioning and / or (b) continuum of one or more body positions.

54. A method according to any of the preceding claims 41-53, wherein such provision enables biometric assessment of such body feature arrangement to include obtaining information about one or more portions of one or more blood vessels, irises, retina, other facial components, hands, wrists, skin components and / or fingerprints.

55. A method according to any of the preceding claims 41-54, wherein such provision enables acquisition of such biometric identification information to include acquisition of biometric identification information of the proximity or quality of presence of a human being performed within an enclosure consisting of at least three walls and at least one environmental anomaly sensing arrangement.

56. A method according to claim 55, wherein such provision also enables the use of at least one sensor to safely monitor the introduction of a tangible object presenting an arrangement of human features into such housing.

57. A method according to claim 55, wherein such provision also enables the use of at least one sensor arrangement embedded in or attached to the shell wall to enable determination of whether an object inserted into the shell is a real human feature arrangement and / or an abnormal, inappropriately present object.

58. A method according to any of the preceding claims 41-57, wherein such provision also enables the use of a secure clock arrangement within such biometric signal sensing and signal information processing arrangement to time and / or date stamp information sets of one or more acquisition and / or authentication process sets.

59. A method according to any of the preceding claims 41-58, wherein such provision also enables secure management of a set of personal identification related processes to include the use of such biometric identification information and / or information derived therefrom at a time contemporaneous with the acquisition of such biometric identification information.

60. The method of any of the preceding claims 41-59, wherein the providing further enables acquisition of the biometric identification information to include generating biometric identification information of a quality close to presence or presence.

61. A method for obtaining, authenticating and managing Internet computing security identification information, the method comprising: By using a hardware and software computing arrangement including at least one processor and associated memory, one or more resources and / or specifications that are at least partially standardized are provided for interconnected computing security identification information acquisition, authentication and management, wherein such interconnected computing security identification information acquisition, authentication and management adopts a hardware and software arrangement set, such A personal biometric identification information acquisition arrangement of at least one secure computing hardware and software in close presence or quality of presence; One or more secure human biometric identifiers and associated attributes information cloud service registration and management arrangements; one or more secure computing hardware and software arrangements configured to carry and forward human biometric identification information and / or information derived at least in part therefrom; as well as one or more secure computing hardware and software arrangements configured to receive and use human biometric identification information and / or information derived at least in part therefrom, Such provision of one or more resources and / or specifications that are at least partially standardized enables such a set of hardware and software arrangements to enable: Acquiring human proximity presence or quality of presence biometric identification information through such secure, tamper-proof proximity presence or quality of presence personal biometric identification information acquisition arrangement; registering such human's acquired biometric identification information of proximity presence or quality of presence and / or information derived at least in part therefrom with one or more such cloud service registration arrangements; receiving, by such carrying and forwarding arrangement from such close presence or quality of presence personal biometric identification information acquisition arrangement, such close presence or quality of presence biometric identification information and / or information derived at least in part therefrom, wherein such carrying and forwarding arrangement then carries such identification information and / or information derived at least in part therefrom; performing a similarity match analysis that compares the acquired set of personal biometric identification information to a previously registered set of biometric identification information of the human being to authenticate the identity of the individual requesting to be allowed to perform authorized use of the tamper-resistant reception and use arrangement; obtaining, by such carry and forward arrangement, biometric identification information operatively concurrently used by a second factor, wherein such second factor identification information and / or information derived at least in part therefrom is evaluated for similarity matching with such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom to determine that such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom and such second factor operatively concurrently biometric identification information and / or information derived therefrom identify the same person; and Based on the corresponding results of one or more such similarity matches, determine whether to allow one or more operations to be performed by at least one of (a) one or more such carrying and forwarding arrangements, (b) one or more such receiving and using arrangements, and (c) one or more receiving and using cloud service arrangements.

62. A method according to claim 61, wherein the provision of one or more resources and / or specifications that are at least partially standardized enables such a set of hardware and software arrangements to perform identification information sensitive operations using trusted computing isolation and cryptographic techniques, wherein (1) the acquisition arrangement, (2) the carrying and forwarding arrangement, and (3) the receiving and using arrangement respectively adopt tamper-resistant hardware identification information processing arrangements that support secure processing and storage of identification information.

63. A method according to any of the preceding claims 61-62, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to also include a personal identification information acquisition arrangement, wherein the personal identification information acquisition arrangement includes an opening on at least one side of a tangible container, wherein one or more biometric sensors and / or transmitters are arranged integrated within and / or on multiple walls of the container.

64. A method according to any of the preceding claims 61-63, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to also include a personal identification information acquisition arrangement, wherein the personal identification information acquisition arrangement includes an opening on at least one side of a tangible container, wherein one or more biometric sensors and / or transmitters are arranged integrated within a wall of the container and / or on a wall of the container.

65. A method according to any of the preceding claims 61-64, wherein the provision of at least partially standardized one or more resources and / or specifications enables such a set of hardware and software arrangements to enable secure binding of such biometric identification information of human proximity or quality of presence to personal suitability-informing attribute information.

66. A method according to claim 63 or 64, wherein the provision of one or more resources and / or specifications that are at least partially standardized enables the hardware and software arrangement set to employ the container arrangement sensors to obtain signal information, wherein the signal information is used to detect timing anomalies associated with virtual and / or augmented reality object representation fraud.

67. A method according to claim 63 or 64, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to enable such container arrangement to employ one or more emitter and sensor arrangements that are at least partially used to detect the internal environment of the container for the presence of one or more tangible objects to determine at least one of: (a) the presence of human tangible components and (b) the inappropriate presence of one or more non-human tangible component deceptive elements.

68. A method according to claim 63 or 64, wherein the provision of one or more resources and / or specifications that are at least partially standardized enables the set of hardware and software arrangements to enable the transmitter and sensor arrangement to employ electromagnetic radiation and / or acoustic radiation.

69. A method according to claim 65, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to enable human attribute information to at least partially include one or more verifiable credentials characterizing corresponding one or more individual stakeholders in a digital and / or physical entity to determine suitability for use of the entity.

70. A method according to claim 65, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to enable human attribute information to at least partially include one or more valid facts characterizing corresponding one or more individual stakeholders in a digital and / or physical entity to determine suitability for use of the entity.

71. A method according to claim 61, 69 or 70, wherein such provision of one or more resources and / or specifications that are at least partially standardized enables such set of hardware and software arrangements to enable suitability notification information about individual stakeholders of an entity to include attribute information designated as a quantified contextual purpose expression securely associated with a biometric identification of the proximity or quality of presence of such stakeholder.

72. A method according to any of the preceding claims 61-71, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to enable secure registration of such near-presence or presence biometric identification information and / or information at least partially derived therefrom to be performed operationally simultaneously with such biometric identification information acquisition, and wherein such registration employs at least one of the following, and the registration information is securely stored within at least one of the following: such (a) acquisition arrangement, (b) receiving and carrying arrangement and / or (c) one or more cloud registration service arrangements.

73. A method according to claim 72, wherein the provision of one or more resources and / or specifications that are at least partially standardized enables such a set of hardware and software arrangements to enable authentication of such personally acquired near-presence or presence biometric identification information and / or information at least partially derived therefrom to be performed by similarity matching such personally acquired near-presence or presence identification information and / or information at least partially derived therefrom with previously acquired, registered such personal identification information stored within such acquisition arrangement, carrying arrangement and / or cloud service.

74. A method according to claim 61, 69 or 70, wherein such provision of one or more resources and / or specifications that are at least partially standardized enables such set of hardware and software arrangements to also enable such near-presence or presence biometric identification information and / or information at least partially derived therefrom to be included and / or otherwise securely bound to device identification secret information to form a fused or otherwise combined device / personal identification information set.

75. A method according to claim 74, wherein such provision of at least partially standardized one or more resources and / or specifications enables such set of hardware and software arrangements to also enable such fused or otherwise combined set of device / personal identification information to include at least one of the sets of factually verifiable information specified by the fact authority of a stakeholder and / or device.

76. A method according to any of the preceding claims 61-75, wherein the provision of at least partially standardized one or more resources and / or specifications enables the set of hardware and software arrangements to further enable the personal biometric identification information acquisition arrangement to include a hardware-based acquisition and forwarding device arrangement that securely employs one or more RIIPU root identification information processing units.

77. A method according to any of the preceding claims 61-76, wherein the provision of at least partially standardized one or more resources and / or specifications enables the set of hardware and software arrangements to also enable the personal biometric identification information acquisition arrangement to include one or more secure carrying and forwarding computing hardware and software arrangements, which employ one or more NIIPU network identification information processing units for securely carrying and forwarding human biometric identification information and / or information at least partially derived therefrom.

78. The method of any one of claims 61-77, wherein the provision of at least partially standardized one or more resources and / or specifications enables the set of hardware and software arrangements to enable the personal biometric identification information acquisition arrangement to include: (a) A hardware-based acquisition and forwarding device arrangement employing one or more RIIPU root identity information processing units; and (b) such one or more secure carry and forward computing hardware and software arrangements, employing one or more NIIPU network identification information processing units, for securely carrying and forwarding human biometric identification information and / or information derived at least in part therefrom.

79. A method according to any of the preceding claims 65-78, wherein the provision of at least partially standardized one or more resources and / or specifications enables such a set of hardware and software arrangements to enable such one or more secure computing hardware and software arrangements for receiving and using human biometric identification information and / or information at least partially derived therefrom to include one or more NIIPU network identification information processing units.

80. A method according to any of the preceding claims 61-79, wherein the provision of at least partially standardized one or more resources and / or specifications enables the set of hardware and software arrangements to enable the use of one or more secure clocks within the personal biometric identification information acquisition arrangement to time and / or date stamp information sets of one or more acquisition and / or authentication process sets.

81. A system for determining biometrically assessed human activity and a corresponding identity of an individual, the system comprising: A computing arrangement comprising at least one processor and associated memory, wherein such computing arrangement is configured to implement any one or more of the following: obtaining personal identification pattern information from a biometrically assessed human body feature arrangement using a biometric signal sensing and signal information processing arrangement for a biometric identification information enrollment process set; Using a secure clock arrangement and a signal sensing and signal information processing arrangement for a biometric identification information enrollment process set, measuring the timing of at least one set of dynamic biological processes occurring at a first location on an enrollment human body and the timing of one or more corresponding sets of dynamic biological processes occurring at one or more other locations on such human body; determining timing relationship information for such set of biological processes at such first and one or more other body locations based on such registered timing measurements of such set of one or more physical events for such set of biological processes, wherein such timing relationship information is configured for subsequent use during the set of authentication processes to determine whether a tangible object presented for biometric assessment represents a living, physically present identified human being; associating such personal identification pattern information with activity-information information at least in part by deriving pattern and timing information from the same and / or related, inherently related sets of information generated by operatively interrelated anatomical elements and / or physiological processes; For a set of authentication processes for a tangible object presented as an arrangement of human features, securely binding (a) information characterizing a timing relationship of a set of physical event processes at locations corresponding to a first and one or more other body locations of such enrolled human being and (b) personal identification pattern information corresponding to the locations; comparing (a) the similarity of the timing relationship activity information obtained for the registration process set with the timing relationship related information obtained for the authentication process set, and comparing (b) the similarity of the personal identification pattern information of the registration process set with the personal identification pattern information of the authentication process set; determining whether such set of authentication processes for the presented tangible object produces information that matches similarity to information obtained from a registered arrangement of living human features, This is accomplished by meeting one or more thresholds for a desired similarity match for such (a) timing relationship information and (b) human feature arrangement personal identification pattern information; and A set of personal identification related processes are securely governed based on such authentication determinations.

82. A system for acquiring, authenticating and managing internet computing security identification information, the system comprising a hardware and software arrangement set, the hardware and software arrangement set comprising any one or more of the following: A personal biometric identification information acquisition arrangement of at least one secure computing hardware and software in close presence or quality of presence; One or more secure human biometric identifiers and associated attributes information cloud service registration and management arrangements; one or more secure computing hardware and software arrangements configured to carry and forward human biometric identification information and / or information derived at least in part therefrom; as well as one or more secure computing hardware and software arrangements configured to receive and use human biometric identification information and / or information derived at least in part therefrom, Wherein such an arrangement set is configured to implement an identification information set based at least in part on biometrics of proximity presence and / or quality of presence.

83. The system of claim 82, wherein the arrangement set is configured to perform any one or more of the following: Acquiring human proximity presence or quality of presence biometric identification information through such secure, tamper-proof proximity presence or quality of presence personal biometric identification information acquisition arrangement; registering such human's acquired biometric identification information of proximity presence or quality of presence and / or information derived at least in part therefrom with one or more such cloud service registration arrangements; receiving, by such carrying and forwarding arrangement from such close presence or quality of presence personal biometric identification information acquisition arrangement, such close presence or quality of presence biometric identification information and / or information derived at least in part therefrom, wherein such carrying and forwarding arrangement then carries such identification information and / or information derived at least in part therefrom; subsequent to such registration of biometric identification information, performing a similarity match of such acquired set of individual biometric identification information with such human's previously registered set of biometric identification information to authenticate the identity of such individual requesting to be allowed to perform authorized use of such tamper-resistant reception and use arrangement; obtaining, by such a carry-and-forward arrangement, second factor operationally concurrently used biometric identification information, wherein such second factor identification information and / or information derived at least in part therefrom is similarity matched with such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom to determine that such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom and such second factor operationally concurrently used biometric identification information and / or information derived therefrom identify the same person; and Based on such an identification matching process set result, determine whether one or more operations are allowed to be performed by at least one of the following: (a) one or more such carrying and forwarding arrangements, (b) one or more such receiving and using arrangements, and (c) one or more receiving and using cloud service arrangements.

84. A method for determining whether a presented object represents a living, biometrically identified, specific human being, the method comprising: By using a hardware and software computing arrangement including at least one processor and associated memory, one or more resources and / or specifications for determining biometrically assessed human activity and corresponding identification of an individual are provided, wherein such provision achieves any one or more of the following: obtaining personal identification pattern information from a biometrically assessed human body feature arrangement using a biometric signal sensing and signal information processing arrangement for a biometric identification information enrollment process set; Using a secure clock arrangement and a signal sensing and signal information processing arrangement, measuring the timing of at least one set of dynamic biological processes occurring at a first location on an enrolling human body and the timing of one or more corresponding sets of dynamic biological processes occurring at one or more other locations on such human body for a set of biometric identification information enrollment processes; determining timing relationship information for such set of biological processes at such first and one or more other body locations based on such registered timing measurements of such set of one or more physical events for such set of biological processes, wherein such timing relationship information is configured for subsequent use during the set of authentication processes to determine whether a tangible object presented for biometric assessment represents a living, physically present identified human being; associating such personal identification pattern information with activity-information information at least in part by deriving pattern and timing information from the same and / or related, inherently related sets of information generated by operatively interrelated anatomical elements and / or physiological processes; For a set of authentication processes for a tangible object presented as an arrangement of human features, securely binding (a) information characterizing a timing relationship of a set of physical event processes at locations corresponding to a first and one or more other body locations of such enrolled human being and (b) personal identification pattern information corresponding to the locations; comparing (a) the similarity of the timing relationship activity information obtained for the registration process set with the timing relationship related information obtained for the authentication process set, and comparing (b) the similarity of the personal identification pattern information of the registration process set with the personal identification pattern information of the authentication process set; determining whether such set of authentication processes for the presented tangible object produces information that matches similarity to information obtained from a registered arrangement of living human features, This is accomplished by meeting one or more thresholds for a desired similarity match for such (a) timing relationship information and (b) human feature arrangement personal identification pattern information; and A set of personal identification related processes are securely governed based on such authentication determinations.

85. A method for obtaining, authenticating and managing Internet computing security identification information, the method comprising: By using a hardware and software computing arrangement including at least one processor and associated memory, one or more resources and / or specifications that are at least partially standardized are provided for interconnected computing security identification information acquisition, authentication and management, wherein such interconnected computing security identification information acquisition, authentication and management adopts a hardware and software arrangement set including any one or more of the following: A personal biometric identification information acquisition arrangement of at least one secure computing hardware and software in close presence or quality of presence; One or more secure human biometric identifiers and associated attributes information cloud service registration and management arrangements; one or more secure computing hardware and software arrangements configured to carry and forward human biometric identification information and / or information derived at least in part therefrom; as well as one or more secure computing hardware and software arrangements configured to receive and use human biometric identification information and / or information derived at least in part therefrom, Such provision of one or more resources and / or specifications that are at least partially standardized enables such a set of hardware and software arrangements to implement an at least partially biometric-based set of identification information that approximates presence and / or quality of presence.

86. The method of claim 85, wherein the provision of at least partially standardized one or more resources and / or specifications enables the set of hardware and software arrangements to perform any one or more of the following: Acquiring human proximity presence or quality of presence biometric identification information through such secure, tamper-proof proximity presence or quality of presence personal biometric identification information acquisition arrangement; registering such human's acquired biometric identification information of proximity presence or quality of presence and / or information derived at least in part therefrom with one or more such cloud service registration arrangements; receiving, by such carrying and forwarding arrangement from such close presence or quality of presence personal biometric identification information acquisition arrangement, such close presence or quality of presence biometric identification information and / or information derived at least in part therefrom, wherein such carrying and forwarding arrangement then carries such identification information and / or information derived at least in part therefrom; subsequent to such registration of biometric identification information, performing a similarity match of such acquired set of individual biometric identification information with such human's previously registered set of biometric identification information to authenticate the identity of such individual requesting to be allowed to perform authorized use of such tamper-resistant reception and use arrangement; obtaining, by such a carry-and-forward arrangement, second factor operationally concurrently used biometric identification information, wherein such second factor identification information and / or information derived at least in part therefrom is similarity matched with such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom to determine that such proximate presence or quality of presence carried biometric identification information and / or information derived at least in part therefrom and such second factor operationally concurrently used biometric identification information and / or information derived therefrom identify the same person; and Based on such an identification matching process set result, determine whether one or more operations are allowed to be performed by at least one of the following: (a) one or more such carrying and forwarding arrangements, (b) one or more such receiving and using arrangements, and (c) one or more receiving and using cloud service arrangements.

Images