Provisioning Token for Secure Digital Document Issuance

The patent introduces a provisioning token as an intermediary object that mediates between the document owner and the mobile device. The token contains cryptographic bindings that authorize specific devices to access document copies, enabling secure sharing without directly exposing the document to untrusted devices. This intermediary mechanism resolves the contradiction by providing controlled accessibility while maintaining cryptographic security through the token's encrypted structure and validation requirements.

The patent segments the document access right into separate components: a provisioning token that can be shared with multiple devices, and individual device bindings that are created during issuance. Each device receives a unique binding that links it to the document copy, while the token itself remains reusable for creating new bindings. This segmentation allows versatile sharing across multiple devices while maintaining data protection through device-specific cryptographic bindings that prevent unauthorized access.

The patent creates a cryptographic copy of the document data embedded within the provisioning token structure. Instead of storing sensitive data in plain text, the system stores encrypted representations that can be validated by authorized devices. The token contains hashed and encrypted versions of the document data, allowing verification of authorization without exposing the actual data. This copying approach enables controlled accessibility while maintaining cryptographic security through the encrypted data representations.