Method for enabling authentication without requiring user identity information

• US 20060218621A1
• Filed: 03/24/2005
• Published: 09/28/2006
• Est. Priority Date: 03/24/2005
• Status: Abandoned Application

• Current Assignee: Intel Corporation
• Original Assignee: Intel Corporation
• Inventors: Covington, Michael J., Sastry, Manoj R.
• Application Number:
  US11/089,885
• Publication Number:
  US 20060218621A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless network architectures or network communication protocols for wireless network security H04W12/00
• CPC Class Codes: H04L 63/0421 Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 9/3234 involving additional secure or trusted devices, e.g. TPM, smartcard, USB or software token network architectures or network communication protocols for supporting authentication of entities using an additional device in a packet data network H04L63/0853
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3271 using challenge-response
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication

Abstract

Authentication based on contextual attributes of a client device may be accomplished by receiving, by a service provider, a request for access from the client device to available content; determining whether access to the content is restricted by a policy; challenging the client device to provide contextual attributes required by the policy, when the policy restricts access to the content; receiving contextual attributes from the client device; determining if the received contextual attributes meet requirements of the policy; and enabling access to the content by the client device when the contextual attributes meet the requirements.

Claims

1. A method of authentication based on contextual attributes of a client device comprising:

receiving, by a service provider, a request for access from the client device to available content;

determining whether access to the content is restricted by a policy;

challenging the client device to provide contextual attributes required by the policy, when the policy restricts access to the content;

receiving contextual attributes from the client device;

determining if the received contextual attributes meet requirements of the policy; and

enabling access to the content by the client device when the contextual attributes meet the requirements.

2. The method of claim 1, wherein the contextual attributes comprise a current geographic location of the client device.

3. The method of claim 2, wherein the contextual attributes comprise purchase information of a user operating the client device for purchasing one of goods and services from the service provider.

4. The method of claim 2, wherein the contextual attributes comprise one or more of current processing load of a processing unit of the client device, available battery power of the client device, and current communications load of between client devices and the service provider.

5. The method of claim 2, wherein the contextual attributes comprise on or more of ambient noise level, brightness, air temperature, and atmospheric pressure at the geographic location.

6. The method of claim 1, wherein the contextual attributes are digitally signed by the client device prior to sending to the service provider.

7. The method of claim 1, further comprising obtaining and securely storing the contextual attributes in the client device prior to sending to the service provider.

8. The method of claim 1, wherein the content comprises one or more of an audio stream, an audio-video stream, and selected web pages, and communication between the client device and the service provider is accomplished wirelessly over the Internet.

9. The method of claim 1, wherein no identity information of the user of the client device is used in authentication of the client device with the service provider.

10. An article comprising:

a storage medium having a plurality of machine accessible instructions, wherein when the instructions are executed by a processor, the instructions provide for authentication based on contextual attributes of a client device by

receiving, by a service provider, a request for access from the client device to available content;

determining whether access to the content is restricted by a policy;

challenging the client device to provide contextual attributes required by the policy, when the policy restricts access to the content;

receiving contextual attributes from the client device;

determining if the received contextual attributes meet requirements of the policy; and

enabling access to the content by the client device when the contextual attributes meet the requirements.

11. The article of claim 10, wherein the contextual attributes comprise a current geographic location of the client device.

12. The article of claim 11, wherein the contextual attributes comprise purchase information of a user operating the client device for purchasing one of goods and services from the service provider.

13. The article of claim 11, wherein the contextual attributes comprise one or more of current processing load of a processing unit of the client device, available battery power of the client device, and current communications load of between client devices and the service provider.

14. The article of claim 11, wherein the contextual attributes comprise on or more of ambient noise level, brightness, air temperature, and atmospheric pressure at the geographic location.

15. The article of claim 10, wherein the content comprises one or more of an audio stream, an audio-video stream, and selected web pages, and communication between the client device and the service provider is accomplished wirelessly over the Internet.

16. The article of claim 10, wherein no identity information of the user of the client device is used by the service provider in authentication of the client device with the service provider.

17. An authentication system based on contextual attributes rather than user identity information comprising:

a client device to request access to content from a service provider, the client device including a trusted platform module to securely store contextual attributes of the client device, and an attribute management module to send contextual attributes of the client device to the service provider; and

an authentication module of the service provider adapted to receive requests for access to content from the client device, to determine whether access to the content is restricted by a policy, to challenge the client device to provide contextual attributes required by the policy when the policy restricts access to the content, to receive contextual attributes from the client device, to determine if the received contextual attributes meet requirements of the policy; and

to enable access to the content by the client device when the contextual attributes meet the requirements.

18. The system of claim 17, wherein the client device comprises a geographic position service (GPS) receiver and the contextual attributes comprise a current geographic location of the client device.

19. The system of claim 18, wherein the contextual attributes comprise purchase information of a user operating the client device for purchasing one of goods and services from the service provider.

20. The system of claim 18, wherein the contextual attributes comprise one or more of current processing load of a processing unit of the client device, available battery power of the client device, and current communications load of between client devices and the service provider.

21. The system of claim 18, wherein the contextual attributes comprise on or more of ambient noise level, brightness, air temperature, and atmospheric pressure at the geographic location.

22. The system of claim 17, wherein the client device digitally signs the contextual attributes using an attestation identity key (AIK) stored in the trusted platform module (TPM) prior to sending the contextual attributes to the service provider.

23. The system of claim 17, wherein no identity information of the user of the client device is used in authentication of the client device with the service provider.