Method and Apparatus for Providing Access to an Identity Service

• US 20070226774A1
• Filed: 05/11/2004
• Published: 09/27/2007
• Est. Priority Date: 05/11/2004
• Status: Active Grant

• Current Assignee: Telefonaktiebolaget LM Ericsson
• Original Assignee: Telefonaktiebolaget LM Ericsson
• Inventors: Garcia Azorero, Fuencisla, Pardo-Blazquez, Avelina, Bas Sanchez, Maria
• Granted Patent: US 7,836,484 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: H04L 67/51 Discovery or management thereof, e.g. service location protocol [SLP] or web services
• CPC Class Codes: H04L 9/40 Network security protocols

Abstract

Method, apparatus and computer program for providing access to identity services of users. A Discovery Service DS server (100) stores for a set of users references (RO1A,ROnB) of identity services (IDSRV-A,IDSRV-B) available for them and usable to contact respectively with the Service Providers SPs (120,130) hosting each of said identity services. For a given identity service not yet registered for a given user, the DS server selects a SP (140) that is able to provide it, and stores a new resource offering (RO2X) that corresponds to the registration of said identity service. For selecting the appropriate SP, the DS server can check a service capability storage (103-2,301) that comprises information about what identity service(s) can be provided by a given SP, and which can be dynamically updated from SPs with the identity services they respectively support. The DS server can contact the user to collect SP preferences and/or service data.

Claims

1. A method of providing access to a non-registered identity service of a user from a Discovery Service server comprising the steps of:

a) storing in said Discovery Service server a resource offering for a registered identity service of said user, said identity service being provided by a Service Provider, and said resource offering comprising a reference usable to contact with said Service Provider to access said identity service,

b) receiving in said Discovery Service server a discovery service query to obtain a resource offering of said user,

c) answering said discovery service query with a discovery service response containing a resource offering of a registered identity service of said user;

d) selecting from said Discovery Service server a Service Provider for providing said non-registered identity service for said user, and

e) storing in said Discovery Service server a resource offering for registering said identity service of said user as provided by said selected Service Provider.

2. The method of claim 1, wherein the step “

d”

further comprises the step of;

checking a service capability storage to select a Service Provider that can provide said identity service, wherein said service capability storage comprises;

at least one identifier of a Service Provider, and at least one identifier of at least one identity service that can be provided from said Service Provider.

3. The method of claim 2, wherein the checking step is repeated periodically.

4. The method of claim 2, further comprising the step of:

storing said server capability storage in said Discovery Service server, wherein the storing said server capability step is executed prior to the checking a service capability step.

5. The method of claim 4, further comprising the steps of:

f) receiving in said Discovery Service server a capability registration from a Service Provider, said capability registration comprising an identifier of an identity service that can be provided from said Service Provider, and

g) updating said server capability storage stored in said Discovery Service server with the content of said capability registration.

6. The method of claim 2, wherein the checking step further comprises the steps of:

sending a service capability query to an external service capability storage, said query comprising an identifier of an identity service, and

receiving a response to said query comprising an identifier of a Service Provider that can provide said identity service.

7. The method of claim 1, further comprising the step of:

h) checking in said Discovery Service server a first identity service against the resource offerings stored for the registered identity services of a user to determine whether said first identity service is a non-registered identity service of said user.

9. The method of claim 7, further comprising the steps of:

sending from said Discovery Service server request for establishing a communication with said user if said first identity service is a non-registered identity service of said user, and

receiving a communication from said user in said Discovery Service server as a response to said request for establishing.

10. The method of claim 1, further comprising the step of:

receiving in said Discovery Service server a communication from said user comprising a service provider preference indicated by said user in said communication, and wherein the step “

d”

further comprises the step of;

selecting one Service Provider among a plurality of Service Providers that can provide said identity service according to said service provider preference.

11. The method of claim 1, further comprising the step of:

receiving in said Discovery Service server a communication from said user comprising service related data indicated by said user in said communication, said service related data being usable for the provision of said identity service from a selected Service Provider.

12. The method of claim 1, wherein the step “

d”

further comprises the steps of;

sending from said Discovery Service server to said selected Service Provider a request for providing said identity service for said user from said selected Service Provider,

receiving in said Discovery Service server a discovery service update from said selected Service Provider as a result of said request, said discovery service update comprising a resource offering for registering said identity service of said user in said Discovery Service server, and wherein the step “

e”

further comprises the step of storing in said Discovery Service server said received resource offering.

13. The method of claim 12, wherein the sending from said Discovery Server step, further comprises the service related data usable for the provision of said identity service for said user from said selected Service Provider.

15. The method of claim 12, wherein the sending from said Discovery Server step further comprises one step selected from:

sending said request for providing included in a discovery service response sent as an answer to a received discovery service request received in said Discovery Service server,

sending said request for providing included in a redirection request for redirecting a communication established between said Discovery Service server and said user towards said selected Service Provider, or

sending said request for providing from said Discovery Service server directly to said selected Service Provider.

8. (canceled)

14. (canceled)

16. A Discovery Service server for providing access to a non-registered identity service of a user, comprising:

a data storage module comprising a first data storage for storing a resource offering for a registered identity service of a user, said identity service being provided by a Service Provider, and said resource offering comprising a reference usable to contact with said Service Provider to access said identity service.

a communication module for exchanging signaling for communicating with other communicating entities, and

a processing module for processing said signaling and for controlling the storage and retrieval of data in said data storage module, wherein said signaling comprises at least;

the reception of a discovery service query to obtain a resource offering of a user,

the sending of a discovery service response containing a resource offering of a registered identity service of said user, wherein said processing module is responsive to the reception of a discovery service query so as to check the content of said first data storage and to prompt said communication module to send said discovery service response;

to select a Service Provider for providing said non-registered identity service for said user, and

to store in said first data storage a resource offering for registering said identity service of said user as provided by said selected Service Provider.

17. The Discovery Service server of claim 16, wherein, for selecting said Service Provider, said processing module is arranged to check a service capability storage comprising at least one identifier of a Service Provider, and at least one identifier of at least one identity service that can be provided from said Service Provider.

18. The Discovery Service server of claim 17, wherein said processing module is arranged to repeat said check periodically.

19. The Discovery Service server of claim 17, wherein said data storage module further comprises a second data storage to store said server capability storage, and wherein said processing module is arranged to check said second data storage in said Discovery Service server to select said Service Provider.

20. The Discovery Service server of claim 19, wherein said communication module is arranged to receive a capability registration from a Service Provider, said capability registration comprising an identifier of an identity service that can be provided from said Service Provider, and wherein said processing module is responsive to the reception of said capability registration so as to update the content of said second data storage with the content of said capability registration.

21. The Discovery Service server of claim 17, wherein said processing module is arranged to prompt said communication module to send a service capability query to an external service capability storage, said service capability query comprising an identifier of an identity service, wherein said communication module is arranged to receive a response to said service capability query comprising an identifier of a Service Provider that can provide said identity service, and wherein said processing module is responsive to the reception of said response so as to select a Service Provider according to the content of said response.

22. The Discovery Service server of claim 16, wherein said processing module is arranged to check a first identity service against the resource offerings stored for the registered identity services of a user in said first data storage to determine whether said first identity service is the non-registered identity service of said user.

23. The Discovery Service server of claim 22, wherein said processing module is responsive to perform said check for said first identity service and said user at a:

reception of a discovery service query requesting to obtain a resource offering of said user as recited in claim 16, or

reception of a capability registration from a Service Provider as recited in claim 20, or

a periodical check of a service capability storage as recited in claim 18, or

reception in said Discovery Service server of a communication from said user.

24. The Discovery Service server of claim 22, wherein said processing module is responsive to the detection of the non-registered identity service for a user so as to prompt said communication module to send a request for establishing a communication with said user.

25. The Discovery Service server of claim 16, wherein said communication module is arranged to receive a communication from said user comprising a service provider preference indicated by said user, and wherein said processing module is responsive to said communication so as to select a Service Provider according to said service provider preference.

26. The Discovery Service server of any of claim 16, wherein said communication module is arranged to receive a communication from said user comprising service related data indicated by said user, said service related data being usable for the provision of said identity service from a selected Service Provider.

27. The Discovery Service server of claim 16, wherein for providing access to a non-registered identity service of a user, said processing module is further arranged to prompt said communication module to send to said selected Service Provider a request for providing said identity service for said user from said selected Service Provider.

28. The Discovery Service server of claim 27, wherein said request for providing comprises service related data usable for the provision of said identity service for said user from said selected Service Provider.

29. The Discovery Service server of claim 28, wherein said service related data comprises at least part of the service related data received in a communication from the user.

30. The Discovery Service server of claim 27, wherein said request for providing is included in:

a discovery service response sent as an answer to a received discovery service request received in said Discovery Service server, or

a redirection request for redirecting a communication established between said Discovery Service server and said user towards said selected Service Provider, or

a direct communication from said Discovery Service server to said Service Provider.

31. The Discovery Service server of claim 27, wherein said communication module is arranged to receive a discovery service update from said selected Service Provider as a result of said request for providing, said discovery service update comprising a resource offering for registering said identity service of said user in said Discovery Service server, and wherein said processing module is responsive to the reception of said discovery service update so as to store in said first data storage said received resource offering.

32. The Discovery Service server of claim 16, wherein the data storage module, comprises at least one data storage device, wherein the communication module comprises at least one communication device for exchanging signaling, and wherein the processing module comprises at least one processor for processing the signaling received by a communication device and for prompting a communication device to transmit the signaling to be sent.

33-48. -48. (canceled)