Method and system for consistent recognition of ongoing digital relationships

• US 20060200667A1
• Filed: 03/07/2005
• Published: 09/07/2006
• Est. Priority Date: 03/07/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Nanda, Arun K., Cameron, Kim, Harjanto, Andy, Kwan, Stuart L.S.
• Granted Patent: US 7,739,500 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 9/3263 involving certificates, e.g. public key certificate [PKC] or attribute certificate [AC]; Public key infrastructure [PKI] arrangements network architectures or network communication protocols for supporting authentication of entities using certificates in a packet data network H04L63/0823

Abstract

Exemplary embodiments disclosed herein may include a method and system for creating an attendance marker and establishing consistent recognition of an ongoing digital relationship, including receiving an identity key about a server, creating an attendance marker, associating the attendance marker with the server. Other embodiments relate to systems and methods for recognizing a server, website, and/or other system for a client, such as a computer system for a user. Such authentication involves receiving an identity key about a web server or other system, creating an attendance marker, associating the attendance marker with the server, requesting an attendance marker associated with a server, and recognizing the server based at least in part on the attendance marker.

Claims

1. A method of recognition of an ongoing digital relationship, comprising:

receiving an identity key associated with a server;

creating an attendance marker;

associating the attendance marker with the server;

requesting an attendance marker associated with a server; and

authenticating the server based at least in part on the attendance marker.

2. The method of claim 1, further comprising creating an attendance marker identifier corresponding to the attendance marker.

3. The method of claim 2, wherein requesting the attendance marker comprises providing the attendance marker identifier corresponding to the attendance marker.

4. The method of claim 2, wherein the attendance marker identifier comprises a hash of the identity key, master key, and a constant.

5. The method of claim 1, further comprising receiving a certificate comprising an identity key.

6. The method of claim 5, further comprising parsing the identity key from the certificate.

7. The method of claim 1, further comprising generating a random master key.

8. The method of claim 7, wherein the creating an attendance marker comprises encrypting identifying information using an encryption key derived from the identity key and the master key.

9. The method of claim 8, wherein the encrypting comprises a hash function.

10. The method of claim 1, further comprising requesting further assurances related to the attendance marker.

11. The method of claim 1, wherein the authenticating comprises decrypting the attendance marker.

12. The method of claim 11, wherein the authenticating comprises determining if the decrypted attendance marker matches an original attendance marker.

13. A system to send an identity information document comprising:

a processor;

a communication channel connected with the processor; and

a memory coupled with and readable by the processor, the memory containing a series of instructions that, when executed by the processor, cause the processor to receive an identity key about a server, create an attendance marker, associating the attendance marker with the server, request an attendance marker associated with a server; and

recognize the server based at least in part on the attendance marker.

14. The method of claim 13, further comprising creating an attendance marker identifier corresponding to the attendance marker.

15. The method of claim 14, wherein requesting the attendance marker comprises providing the attendance marker identifier corresponding to the attendance marker.

16. The method of claim 13, further comprising requesting further assurances related to the attendance marker.

17. The system of claim 13, wherein the creating comprises encrypting some identifying information using an encryption key derived from the identity key and a random master key.

18. The system of claim 17, wherein the encrypting comprises a hash function.

19. The system of claim 13, further comprising:

responsive to recognizing the server, allowing further interaction between the client and the server, and

responsive to not recognizing the server, requesting a certificate about the server.

20. A computer program product encoding a computer program of instructions for executing a computer implemented method for recognition of an ongoing digital relationship, the method comprising:

receiving an identity key associated with a server;

creating an attendance marker;

associating the attendance marker with the server; and

storing the attendance marker at a remote location.