Method and apparatus to provide a user profile for use with a secure content service

• US 20070261116A1
• Filed: 10/31/2006
• Published: 11/08/2007
• Est. Priority Date: 04/13/2006
• Status: Abandoned Application

• Current Assignee: Moreover Acquisition Corporation
• Original Assignee: VeriSign, Inc.
• Inventors: Graves, Michael, Krall, Gary, Prafullchandra, Hemma, Granqvist, Hans, Lundberg, Emory
• Application Number:
  US11/591,206
• Publication Number:
  US 20070261116A1
• Time in Patent Office: Days
• US Class Current: 726/22
• CPC Class Codes: G06F 21/50 Monitoring users, programs or devices to maintain the integrity of platforms, e.g. of processors, firmware or operating systems
• CPC Class Codes: H04L 51/52 for supporting social networking services
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 67/306 User profiles

Abstract

A secure content service available through a network comprising a user profile stored in a user profile store and a profile access controller to enforce access rights to the user profile, wherein the user profile is used to provide access rights to other content.

Claims

1. A secure content service available through a network, the secure content service comprising:

a user profile store to store a plurality of user profiles including attributes, the user profile used for authentication on the network;

a user profile log to log all accesses to a user profile, the user profile log accessible to the user for review; and

monitoring and logging logic to monitor the user profile log for anomalous activities.

2. The secure content service of claim 1, wherein the user profile has a reliance score indicating a level of confidence in the profile information.

3. The secure content service of claim 1, further comprising:

a profile creation mechanism enabling a user to create a new profile in the system, the new profile identified by a unique identifier.

4. The secure content service of claim 3, wherein the unique identifier is a universal resource indicator (URI) which provides access to the profile.

5. The secure content service of claim 3, wherein the new profile is based on a template including a plurality of attributes which may be filled out by the user.

6. The secure content service of claim 5, wherein at least one of the plurality of attributes is extendible.

7. The secure content service of claim 5, further comprising user-defined attributes which may be added to the new user profile.

8. The secure content service of claim 5, further comprising third party authentication associated with one or more attributes.

9. The secure content service of claim 5, further comprising custom attributes which may be added by the user.

10. The secure content service of claim 9, wherein the custom attributes are propagated to the template.

11. The secure content service of claim 10, wherein the custom attributes are propagated to the template when the custom attributes are acceptable, adopted by a sufficient group, and/or approved by an authorized administrator.

12. The secure content service of claim 1, further comprising:

a profile creation mechanism enabling a user to copy and paste an existing profile to create a new profile with attributes copied from the existing profile.

13. The secure content service of claim 1, further comprising:

a monitoring and logging logic to log each access to the secure content service, and to monitor the log, to provide security for the user

14. The secure content service of claim 13, wherein the monitoring and logging logic is for identifying anomalous access requests, wherein an access request is logged for each encryption and decryption request, the service further comprising:

an alert logic to notify the user of the anomalous request.

15. The secure content service of claim 13, wherein the monitoring and logging logic may be used to provide proof-of-reading receipts for encrypted content.

16. The secure content service of claim 13, wherein the monitoring and logging logic is further for identifying access requests to the user profile that require real-time authorization from the user, and further:

an alert logic to request real-time authorization from the user, and provide access to the user profile only when authorization is received.

17. A secure content service available through a network comprising:

a user profile stored in a user profile store;

a profile access controller to enforce access rights to the user profile, wherein the user profile is used to provide access rights to other content.