Enhanced quality of identification in a data communications network

• US 20030084170A1
• Filed: 10/29/2001
• Published: 05/01/2003
• Est. Priority Date: 10/29/2001
• Status: Active Grant

• Current Assignee: Oracle America, Inc. (Oracle Corporation)
• Original Assignee: Sun Microsystems Incorporated (Oracle Corporation)
• Inventors: de Jong, Eduard K., Levy, Moshe, Leung, Albert Y.
• Granted Patent: US 7,085,840 B2
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

A method for enhanced quality of identification in a data communications network includes obtaining a user identifier that includes an identification server ID and an identification randomized ID. The identification server ID identifies an identification server peer group. The identification server peer group includes at least one server that maintains a mapping between an identification randomized ID and a user authentication peer group capable of authenticating a user associated with a particular randomized ID, and a mapping between the identification randomized ID and user information. The method also includes requesting authorization of the user by presenting the user identifier to a corresponding identification server peer group. Each server in the identification server peer group is configured to search for one or more matching entries including the randomized ID.

Claims

1. A method for enhanced quality of identification in a data communications network, the method comprising:

obtaining a user identifier, said user identifier comprising an identification server ID and an identification randomized ID, said identification server ID identifying an identification server peer group, said identification server peer group comprising at least one server that maintains a mapping between an identification randomized ID and a user authentication peer group capable of authenticating a user associated with a particular randomized ID, and a mapping between said identification randomized ID and user information;

requesting authorization of said user by presenting said user identifier to a corresponding identification server peer group, each server in said identification server peer group configured to search for one or more matching entries including said randomized ID.

2. A program storage device readable by a machine, embodying a program of instructions executable by the machine to perform a method for enhanced quality of identification in a data communications network, the method comprising:

obtaining a user identifier, said user identifier comprising an identification server ID and an identification randomized ID, said identification server ID identifying an identification server peer group, said identification server peer group comprising at least one server that maintains a mapping between an identification randomized ID and a user authentication peer group capable of authenticating a user associated with a particular randomized ID, and a mapping between said identification randomized ID and user information;

requesting authentication of said user by presenting said user identifier to a corresponding identification server peer group, each server in said identification server peer group configured to search for one or more matching entries including said randomized ID.

3. An apparatus for enhanced quality of identification in a data communications network, the apparatus comprising:

means for obtaining a user identifier, said user identifier comprising an identification server ID and an identification randomized ID, said identification server ID identifying an identification server peer group, said identification server peer group comprising at least one server that maintains a mapping between an identification randomized ID and a user authentication peer group capable of authenticating a user associated with a particular randomized ID, and a mapping between said identification randomized ID and user information;

means for requesting authentication of said user by presenting said user identifier to a corresponding identification server peer group, each server in said identification server peer group configured to search for one or more matching entries including said randomized ID.