Method for using a service, a system, and a terminal

• US 20030135732A1
• Filed: 12/24/2002
• Published: 07/17/2003
• Est. Priority Date: 12/27/2001
• Status: Abandoned Application

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Vaha-Sipila, Antti
• Application Number:
  US10/328,858
• Publication Number:
  US 20030135732A1
• Time in Patent Office: Days
• US Class Current: 713/156
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources

Abstract

The invention relates to a method for using a service (7) at a terminal (6). In the method, for using a service (7), at least one certificate is transmitted (303, 406) from the terminal (6) to said service (7). In the service (7), requirements are set for the data content of the certificate. Information about said requirements is transmitted (301) from the service (7) to the terminal (6), in which a certificate acquisition step (402, 403, 404) is taken to acquire a certificate complying with the requirements, and a certificate transmission step (303, 406) is taken to transmit the acquired certificate to said service (7). The invention also relates to a system (1), in which the method is applied, as well as to a terminal (6) to be used in the system (1).

Claims

1. A method for using a service at a terminal, in which method, for using the service, at least one certificate is transmitted from the terminal to said service, and requirements for the data content of the certificate are set in the service, wherein information about said requirements is transmitted from the service to the terminal, which takes a certificate acquisition step to acquire a certificate complying with the requirements, and a certificate transmission step to transmit the acquired certificate to said service.

2. The method according to claim 1, wherein in the certificate acquisition step, it is examined, if a certificate complying with the requirements is stored in the terminal, and if a certificate complying with the requirements is found on the basis of the examination, it is selected to be transmitted to said service.

3. The method according to claim 2, wherein if a certificate complying with the requirements is not found in the terminal, it is examined from the requirements set for the certificate, if a certificate generated in the terminal will be acceptable to the service, wherein if a certificate generated in the terminal will be acceptable to the service, the terminal takes a certificate generation step to generate a certificate, to examine from the certificate requirements, what information should be included in the certificate, and to provide the certificate with information complying with the requirements for the certificate.

4. The method according to claim 2, wherein if a certificate complying with the requirements is not found in the terminal, it is examined from the requirements set for the certificate, which certificate authority is acceptable to the service to issue a certificate, wherein the terminal selects one of the certificate authorities included in the certificate requirements, and the certificate is acquired from said selected certificate authority.

5. The method according to claim 1, wherein the acquired certificate is stored in the terminal.

6. The method according to claim 1, wherein the service is allocated an index which is connected to the certificate acquired in the terminal, wherein the acquired certificate is used in the terminal later on when using the same service.

7. The method according to claim 1, wherein if the number of available certificates is more than one, a certificate containing as little information related to the user'"'"'s person as possible is selected to be transmitted to the service.

8. The method according to claim 1, wherein the certificate is a non-identifying certificate, wherein information, on the basis of which the user can be identified, is excluded from the certificate.

9. The method according to claim 1, wherein the information to be included in the certificate contains at least one of the following items of user-specific information:

pseudonym,

e-mail address,

name,

age,

sex,

hobbies,

membership number,

client number,

identity code.

10. The method according to claim 1, wherein an anonymous e-mail address is formed for the user to use the service, wherein the certificate to be transmitted to the service is provided with information about said anonymous e-mail address, and any e-mail to be transmitted to the user via the service is transmitted to said anonymous e-mail address.

11. The method according to claim 4, wherein the server transmits information about the certificate authorities whose certificates are acceptable to the service.

12. The method according to claim 1, wherein the server transmits to the terminal at least one message which contains information about said requirements for the data content of the certificate needed in the service.

13. The method according to claim 11, wherein the server transmits to the terminal at least one message which contains information about said requirements for the data content of the certificate needed in the service, and said message contains a list of the certificate authorities whose certificates are accepted in the service.

14. A system which comprises services, means for using at least one service at a terminal, means for transmitting at least one certificate from the terminal to said service for using the service, and in which service requirements are set for the data content of the certificate, wherein the system also comprises means for transmitting information about said requirements from the service to the terminal, which terminal comprises means for acquiring a certificate complying with the requirements, and means for transmitting the acquired certificate to said service.

15. The system according to claim 14, wherein the means for acquiring the certificate comprise means for examining, if a certificate complying with the requirements is stored in the terminal, and means for selecting a certificate complying with the requirements to be transmitted to said service, if a certificate complying with the requirements has been found on the basis of the examination.

16. The system according to claim 14, wherein the requirements contain information about whether a certificate formed in the terminal is accepted in the service, wherein the system comprises means for examining said information, and means for forming a certificate in the terminal.

17. The system according to claim 14, wherein the requirements contain information about what data must be included in the certificate, wherein the system comprises means for providing the certificate with data complying with the requirements of the certificate.

18. The system according to claim 14, wherein the requirements contain information about the certificate authority whose certificate is acceptable to the service, wherein the system comprises means for selecting one of the certificate authorities indicated in the requirements of the certificate, and means for acquiring a certificate from said selected certificate authority.

19. The system according to claim 14, wherein the service is allocated an index which is connected to the certificate acquired in the terminal, wherein the system comprises means for using the acquired certificate in the terminal when using the same service later on.

20. The system according to claim 14, wherein the certificate is a non-identifying certificate, wherein information, on the basis of which the user can be identified, is excluded from the certificate.

21. The system according to claim 14, wherein the data included in the certificate contains at least one of the following items of user-specific information:

pseudonym,

e-mail address,

name,

age,

sex,

hobbies,

membership number,

client number,

identity code.

22. The system according to claim 14, wherein an anonymous e-mail address is generated for the user to use the service, wherein the certificate to be transmitted to the service is provided with data about said anonymous e-mail address, and the system also comprises means for transmitting any e-mail to be transmitted to the user via the service to said anonymous e-mail address.

23. A terminal for use in a system comprising services, which terminal comprises means for using at least one service, means for transmitting at least one certificate from the terminal to said service for using the service, and in which service requirements are set for the data content of the certificate, wherein the terminal also comprises means for receiving information about said requirements transmitted from the service, means for acquiring a certificate complying with the requirements, and means for transmitting the acquired certificate to said service.

24. The terminal according to claim 23, wherein the means for acquiring the certificate comprise means for examining, if a certificate complying with the requirements is stored in the terminal, and means for selecting a certificate complying with the requirements to be transmitted to said service, if a certificate complying with the requirements has been found on the basis of the examination.

25. The terminal according claim 23, wherein it comprises means for storing the acquired certificate.

26. The terminal according to claim 23, wherein it comprises means for examining the amount of data related to the user'"'"'s person in the selectable certificates, and means for selecting the certificate to be transmitted to the service on the basis of the amount of data related to the user'"'"'s person in the certificate.

27. A mobile station for use in a system comprising services, which mobile station comprises means for using at least one service, means for transmitting at least one certificate from the terminal to said service for using the service, and in which service requirements are set for the data content of the certificate, wherein the mobile station also comprises means for receiving information about said requirements transmitted from the service, means for acquiring a certificate complying with the requirements, and means for transmitting the acquired certificate to said service.