Portable personal identity information

• US 20080028215A1
• Filed: 07/28/2006
• Published: 01/31/2008
• Est. Priority Date: 07/28/2006
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bhargava, Ruchita, Nanda, Arun K., Melton, Lucas R.
• Granted Patent: US 8,078,880 B2
• Time in Patent Office: Days
• US Class Current: 713/168
• CPC Class Codes: G06F 21/335 for accessing specific resources, e.g. using Kerberos tickets
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A user interacts with a client containing personal identity information operable to identify the user to a relying party when the relying party is presented with claims comprising a portion of the personal identity information. The personal identity information includes one or more claims, metadata associated with the one or more claims, and backing data associated with the one or more claims. The user may initiate use of another client and seek to be identified by the relying party while interacting with the other client by first porting the personal identity information to the other client. Porting the personal identity information includes binding the personal identity information and sending the bound personal identity information to a receiving client.

Claims

1. A method for porting personal identity information, comprising:

binding personal identity information, wherein the personal identity information comprises a) one or more claims, b) metadata associated with the one or more claims, and c) backing data associated with the one or more claims; and

sending the bound personal identity information to a receiving client.

2. The method of claim 1, further comprising causing the binding of personal identity information in response to a received user-action.

3. The method of claim 1, wherein:

binding personal identity information further comprises, binding the personal identity information together with a container; and

wherein sending the personal identity information further includes, sending the container.

4. The method of claim 3, wherein binding further comprises incorporating the personal identity information into the container.

5. The method of claim 1, further comprising, encrypting the personal identity information prior to sending.

6. The method of claim 5, wherein encrypting the personal identity information further comprises encrypting the bound personal identity information.

7. The method of claim 1, further comprising standardizing the personal identity information prior to sending.

8. The method of claim 1, wherein sending the bound personal identity information to the receiving client, further comprises encoding the bound personal identity information on a portable medium.

9. The method of claim 1, further comprising, after sending the bound personal identity information, marking the personal identity information as sent.

10. A method for receiving ported personal identity information, comprising,

receiving bound personal identity information from an originating client, wherein the personal identity information comprises a) one or more claims, b) metadata associated with the one or more claims, and c) backing data associated with the one or more claims;

and

unbinding the received bound personal identity information.

11. The method of claim 10, further comprising, locally storing the received personal identity information.

12. The method of claim 10, wherein receiving the bound personal identity information is in response to the attachment of a portable medium with the bound personal identity information encoded thereon.

13. The method of claim 10, further comprising, upon receiving the bound personal identity information, signaling the originating client.

14. The method of claim 10, further comprising, decrypting the bound personal identity information when encrypted.

15. The method of claim 10, further comprising, localizing standardized personal identity information.

16. A computer-readable medium having computer-executable instructions for performing steps comprising:

receiving a user action in accord with identifying the user on a second client and thereby causing a first client to perform the steps of,

binding personal identity information together, wherein the personal identity information comprises a) one or more claims, b) metadata associated with the one or more claims, and c) backing data associated with the one or more claims; and

sending the bound personal identity information to a receiving client.

17. The computer-readable medium of claim 16 having further computer-executable instructions for performing the step of standardizing the personal identity information to be sent.

18. The computer-readable medium of claim 16 wherein:

the computer-executable instructions for performing the step of binding further comprise, computer-executable instructions for binding the personal identity information together with a container; and

the computer-executable instructions for performing the step of sending the bound personal identity information further comprise, instructions for sending the container.

19. The computer-readable medium of claim 16, having further computer-executable instructions for performing the steps of:

receiving bound personal identity information from an originating client, wherein the personal identity information comprises a) one or more claims, b) metadata associated with the one or more claims, and c) backing data associated with the one or more claims; and

storing the received personal identity information.

20. The computer-readable medium of claim 16 having further computer-executable instructions for performing the step of triggering the execution of the steps for binding personal identity information together and sending the bound personal identity information together, in accord with a user action.