35. The computer-readable medium of claim 34 , wherein the pre-image contains at least one of transaction-specific and user-specific information that is fully or partially revealed to the RP but not to the IdP.
34. The computer-readable medium of claim 32 , wherein the original token is generated cryptographically from a pre-image, the pre-image supports both fixed-format and free-format information structures.