Digital credential monitoring

• US 20020116647A1
• Filed: 02/20/2002
• Published: 08/22/2002
• Est. Priority Date: 02/20/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Company (HP Inc.)
• Inventors: Brown, Richard, Mont, Marco Casassa
• Application Number:
  US10/077,853
• Publication Number:
  US 20020116647A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A computer system comprising a first computer node coupled to a network, the first node being arranged to provide a service to a second computer node via a connection over the network; a controller for determining access to the service based upon a digital credential associated with the connection, the controller being arranged to vary access to the service over the connection in response to a change in status of the digital credential.

Claims

1. A computer system comprising a first computer node coupled to a network, the first node being arranged to provide a service to a second computer node via a connection over the network;

a controller for determining access to the service based upon a digital credential associated with the connection, the controller being arranged to vary access to the service over the connection in response to a change in status of the digital credential.

2. A computer system according to claim 1, wherein the controller forms part of the first computer node.

3. A computer system according to claim 1, wherein the digital credential is an attribute credential of an entity associated with the second computer node.

4. A computer system according to claim 1, wherein the first computer node is arranged to provide the service to a plurality of computer nodes via a plurality of respective connections over the network.

5. A computer system according to claim 4, wherein the controller is suitable for arranging digital credentials into groups, each group being associated with one or more respective secure connections to allow a user to monitor the status of the digital credentials associated with a secure connection.

6. A computer system according to claim 4, wherein the controller is suitable for arranging digital credentials into groups, each group being associated with one or more respective secure connections to allow the controller to control the digital credentials according to a policy.

7. A computer system according to claim 1, further comprising a digital register for listing the status of digital credentials;

monitoring means for monitoring the digital register for changes in the status of a digital credential, wherein the controller is responsive to the monitoring means for varying access to the service in response to a change in status of the digital credential.

8. A computer node for providing a service to a second computer node via a connection over a network, the computer node comprising a controller for determining access to the service based upon a digital credential associated with the connection, the controller being arranged to vary access to the service over the connection in response to a change in status of the digital credential.

9. A computer node according to claim 8, wherein the service is provided to a plurality of computer nodes via a plurality of respective connections over the network.

10. A computer node according to claim 9, wherein the controller is suitable for arranging digital credentials into groups, the groups being associated with a respective secure connection to allow a user to monitor the status of the digital credentials associated with a secure connection.

11. A computer node according to claim 9, wherein the controller is suitable for arranging digital credentials into groups, the groups being associated with a respective secure connection to allow the controller to control the digital credentials according to a policy.

15. A computer system according to claim 14, wherein the first node further comprises a controller for arranging digital credentials into groups, the groups being associated with a respective connection to allow a user to monitor digital credentials associated with a connection.

12. A controller for determining access to a service provided by a first computer node to a second computer node via a connection over a network, the controller being arranged to vary access to the service over the connection in response to a change in status of a digital credential associated with the connection.

13. A method for providing a service, the method comprising establishing a connection between a first computer node and a second computer node via a network;

providing a service for the second computer node from the first computer node via the connection;

determining access to the service based upon a digital credential associated with the connection;

varying access to the service over the connection in response to a change in status of the digital credential.

14. A computer system comprising a first computer node coupled to a network, the first node being arranged to provide a service to a second computer node via a connection over the network;

a controller for determining access to the service based upon a digital credential associated with the connection, the first node having memory for storing the digital credential associated with the connection and a display for presenting to a user information associated with the digital credential.