Anonymous access to a service

• US 20040078475A1
• Filed: 11/17/2003
• Published: 04/22/2004
• Est. Priority Date: 11/21/2000
• Status: Abandoned Application

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Camenisch, Jan, Waidner, Michael, Van Herreweghen, Elsie A.
• Application Number:
  US10/432,266
• Publication Number:
  US 20040078475A1
• Time in Patent Office: Days
• US Class Current: 709/229
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

A method and a system for providing an anonymous access to a service within a network is disclosed. Thereby a user entity sends a user request comprising access-service information and requested service information to an anonymous-access service. The anonymous-access service verifies whether the access-service information are valid. In the event that the access-service information are valid, the anonymous-access service assigns the access-service information to subscription information and connects to the service by sending a verified request comprising the subscription information and the requested service information. The anonymous-access service receives response-service information from the service and forwards it to the user entity. By doing so, the user'"'"'s instances of access to the services are not linkable to each other nor are they linkable to the user'"'"'s real identity.

Claims

1. A method for providing an anonymous access to a service (30) within a network, the method comprising the steps of:

connecting a user entity (10) to an anonymous-access service (20) by sending a user request (12) comprising access-service information (7) and requested service information (14);

verifying by said anonymous-access service (20) whether said access-service information (7) are valid and in the event that said access-service information (7) are valid connecting said anonymous-access service (20) to said service (30), the connecting step comprising,

sending to said service (30) a verified request (22) comprising subscription information (24) and said requested service information (14);

receiving from said service (30) response-service information (34) in response to said requested service information (14);

forwarding said response-service information (34) by said anonymous-access service (20) to said user entity (10).

5. A method according to any of the preceding claims comprising connecting the user entity (10) to a subscription service (2) by sending activation information (4) and receiving access information (6) that being usable as the access-service information (7).

6. A method according to claim 5, whereby the step of sending an activation information (4) comprises sending payment activation information (4) to perform a payment transaction.

7. A method according to any of the preceding claims comprising connecting the user entity (10) to a registration service (40) by sending a credential request information (8) and receiving a registration information (42), said registration information (42) being usable to obtain access information (6).

8. A method according to any of the preceding claims comprising prestoring the subscription information (24) at the anonymous-access service (20).

9. The method according to the claims 1 or 2, whereby the step of verifying whether said access-service information (7) are valid comprises assigning the access-service information (7) to the subscription information (24).

10. A computer program element comprising program code means for performing a method of any one of the claims 1 to 9 when said program is run on a computer.

11. A computer program product stored on a computer usable medium, comprising computer readable program means for causing a computer to perform a method according to anyone of the preceding claims 1 to 9.

2. A method for providing an anonymous access to a service (30) within a network, the method comprising the steps of:

receiving from a user entity (10) a user request (12) comprising access-service information (7) and requested service information (14);

verifying whether said access-service information (7) are valid and in the event that said access-service information (7) are valid

connecting to said service (30), the connecting step comprising,

sending a verified request (22) comprising subscription information (24) and said requested service information (14);

receiving response-service information (34) in response to said requested service information (14);

forwarding said response-service information (34) to said user entity (10).

3. A method for providing an anonymous access to a service (30) within a network, the method comprising the steps of:

receiving from an anonymous-access service (20) a verified request (22) comprising subscription information (24) and requested service information (14), whereby said anonymous-access service (20) receives from a user entity (10) a user request (12) comprising access-service information (7) and said requested service information (14), and assigns said access-service information (7) to said subscription information (24) if said access-service information (7) are valid;

sending response-service information (34) in response to said requested service information (14) to said anonymous-access service (20) that forwards it to said user entity (10).

4. A method for providing an anonymous access to a service (30) within a network, the method comprising the steps of:

sending a user request (12) comprising access-service information (7) and requested service information (14) to an anonymous-access service (20),

whereby said anonymous-access service (20) verifies whether said access-service information (7) are valid and assigns said access-service information (7) to subscription information (24) if said access-service information (7) are valid,

said anonymous-access service (20) connects to said service (30) by

sending a verified request (22) comprising said subscription information (24) and said requested service information (14) and

receiving response-service information (34) in response to said requested service information (14),

said anonymous-access service (20) forwards said response-service information (34);

receiving said response-service information (34) from said anonymous-access service (20).

12. A system for providing an anonymous access within a network comprising:

a user entity (10);

an anonymous-access service (20) being connectable to said user entity (10);

a service (30) being connectable to said anonymous-access service (20),

wherein said user entity (10) is adapted to send, in use, a user request (12) comprising access-service information (7) and requested service information (14) to said anonymous-access service (20), said anonymous-access service (20) verifies whether said access-service information (7) are valid and in the event that said access-service information (7) are valid assigns said access-service information (7) to subscription information (24) and connects to said service (30) by sending a verified request (22) comprising said subscription information (24) and said requested service information (14), said anonymous-access service (20) receives response-service information (34) from said service (30) and forwards it to said user entity (10).

13. A system according to claim 12 further comprising a subscription service (2) being connectable to said user entity (10).

14. A system according to claim 13, wherein the subscription service (2) and the anonymous-access service (20) are integrated in a unitary entity (50).

15. A system according to claim 12, wherein the subscription service (2) and the anonymous-access service (20) are part of the service (30).

16. A system according to any of the preceding claims 12 to 15, wherein the access-service information (7) comprises a credential.

17. A system according to any of the preceding claims 12 to 15, wherein the access-service information (7) comprises a certificate.

18. A system according to any of the preceding claims 12 to 15, wherein the subscription information (24) are prestored.

19. A system according to any of the preceding claims 12 to 15, wherein the requested service information (14) comprises an Uniform Resource Locator (URL).

20. A system according to any of the preceding claims 12 to 15, wherein the subscription information (24) comprises a cookie, a user-id, or a user-id password.

21. A system according to any of the preceding claims 12 to 15, wherein the service (30) comprises a subscription-based service (30).

22. A system according to any of the preceding claims 12 to 15, wherein the service (30) comprises a payment-based service (30).