Identity based service system

• US 20050076248A1
• Filed: 10/02/2003
• Published: 04/07/2005
• Est. Priority Date: 10/02/2003
• Status: Active Grant

• Current Assignee: Google LLC (Alphabet Inc.)
• Original Assignee: AOL LLC (Apollo Global Management, Inc.)
• Inventors: Carriere, Steven Jeromy, Toomey, Christopher Newell, Cahill, Conor P., Roskind, James, Aoki, Norihiro Edwin, Wexelblat, David Eli
• Granted Patent: US 7,290,278 B2
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06Q 20/0855 involving a third party
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/401 Transaction verification
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

An identity based service system is provided, in which an identity is created and managed for a user or principal, such that at least a portion of the identity is available to use between one or more system entities. A discovery service enables a system entity to discover a service descriptor, given a service name and a name identifier of the user, whereby system entities can find and invoke the user'"'"'s other personal web services. The discovery service preferably provides a translation between a plurality of namespaces, to prevent linkable identity information over time between system entities.

Claims

1. An identity based service system, comprising:

at least one principal comprising at least one identity comprising user information;

a basic authentication agency for managing at least one identity for the principal, and for authenticating the principal; and

a system entity which is accessible by the principal, based on an authentication of the principal by the basic authentication agency, and based on retrieval of at least a portion of user information from the basic authentication agency.

2. The identity based service system of claim 1, further comprising:

at least one core service associated with the system and related to at least a portion of the user information.

3. The identity based service system of claim 2, wherein the core service is accessible by the user, based on an authentication of the principal by the basic authentication agency.

4. The identity based service system of claim 2, wherein the core service is accessible by the system entity, based on an authentication of the principal by the basic authentication agency.

5. The identity based service system of claim 2, wherein the core service is associated with one or more core service providers.

6. The identity based service system of claim 2, wherein the core service comprises any of an authentication service, a profile service, an alert service, a calendar service, and a wallet service.

7. The identity based service system of claim 1, wherein the basic authentication agency further comprises means for translating namespaces, such that a user identity of a principal in a first namespace is translatable to a user identity in a second namespace.

8. The identity based service system of claim 7, wherein the user identity in the second namespace is encrypted.

9. The identity based service system of claim 7, wherein the user identity in the second namespace is time-bound.

10. The identity based service system of claim 1, further comprising:

at least one core authentication record associated with the identity, comprising any of services and links associated with the identity.

11. An identity based service system, comprising:

a basic authentication agency for managing an identity for a user;

means for discovering a service descriptor for the user, based on a received user identifier and a service name from the basic authentication agency; and

whereby at least one web service is accessible, based upon the discovered service descriptor and the name identifier.

12. The identity based service system of claim 11, further comprising:

a discovery module associated with the basic authentication agency and adapted to receive a user identifier associated with the user and a service name known to the system.

13. The identity based service system of claim 11, further comprising:

at least one core service associated with the system and related to the user.

14. The identity based service system of claim 13, wherein the core service is accessible by the user, based on a system authentication of the principal at the basic authentication agency.

15. The identity based service system of claim 13, wherein the core service is accessible by a system entity, based on an authentication of the principal at the basic authentication agency.

16. The identity based service system of claim 13, wherein the core service is associated with one or more core service providers.

17. The identity based service system of claim 13, wherein the core service comprises any of an authentication service, a profile service, an alert service, a calendar service, and a wallet service.

18. The identity based service system of claim 11, wherein the basic authentication agency further comprises means for translating namespaces, such that a user identity of a principal in a first namespace is translatable to a user identity in a second namespace.

19. The identity based service system of claim 18, wherein the user identity in the second namespace is encrypted.

20. The identity based service system of claim 18, wherein the user identity in the second namespace is time-bound.

21. The identity based service system of claim 11, further comprising:

at least one core authentication record associated with the identity, comprising any of services and links associated with the identity.

22. The system of claim 11, wherein the principal is located at a device linked to the identity based service system.

23. An identity based service process, comprising:

providing a basic authentication agency for managing an identity for a user;

receiving a user identifier associated with the user and a service name known to the system;

discovering a service descriptor for the user, based on a received user identifier and a service name; and

controllably authenticating access to a service, based upon the receipt of the discovered service descriptor and the name identifier.

24. The process of claim 23, further comprising the step of:

establishing at least one core service associated with the system and related to the user.

25. The process of claim 24, wherein the core service is accessible by the user, based on a system authentication of the principal at the basic authentication agency.

26. The process of claim 24, wherein the core service is accessible by a system entity, based on an authentication of the principal at the basic authentication agency.

27. The process of claim 24, wherein the core service is associated with one or more core service providers.

28. The process of claim 23, wherein the core service comprises any of an authentication service, a profile service, an alert service, a calendar service, and a wallet service.

29. The process of claim 23, further comprising the step of:

translating namespaces, such that a user identity of a principal in a first namespace is translated to a user identity in a second namespace.

30. The process of claim 29, further comprising the step of:

encrypting the user identity in the second namespace.

31. The process of claim 29, wherein the user identity in the second namespace is time-bound.

32. The process of claim 23, further comprising the step of:

associating at least one core authentication record with the identity, comprising any of services and links associated with the identity.

33. A process, comprising the steps of:

providing a basic authentication agency networked to a service having a service name;

establishing an identity at the basic authentication agency for a principal, comprising information and a name identifier for a user;

establishing a link between the principal and the service by the basic authentication agency, based upon a receipt of a user identifier and a service name.