System and Method for Expressing and Evaluating Signed Reputation Assertions

• US 20080222425A1
• Filed: 03/06/2007
• Published: 09/11/2008
• Est. Priority Date: 03/06/2007
• Status: Active Grant

• Current Assignee: Emc IP Holding Company LLC (Dell Technologies Inc.)
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Buss, Duane
• Granted Patent: US 8,301,901 B2
• Time in Patent Office: Days
• US Class Current: 713/185
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/123 received data contents, e.g. message integrity
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A method for expressing and evaluating signed reputation assertions is disclosed. In one embodiment, a first entity receives a request to generate a signed assertion relating to a piece of content. The first entity generates a reputation statement about a second entity from reputation-forming information (RFI) about the second entity available to the first entity. The first entity then generates a signed assertion from the reputation statement and the piece of content at least in part by binding the piece of content to the reputation statement and signing a portion encompassing at least one of the bound piece of content and the bound reputation statement. The signed assertion is then transmitted to a receiving entity.

Claims

1. A method comprising:

receiving a request to generate a signed assertion relating to a piece of content;

generating a reputation statement concerning a known entity from reputation-forming information (RFI) associated with the known entity;

generating a signed assertion from the reputation statement and the piece of content, the generating comprising binding the piece of content to the reputation statement and signing a portion comprising at least one of the bound piece of content and the bound reputation statement; and

transmitting the signed assertion to a receiving entity.

2. The method of claim 1 wherein the known entity is the receiving entity.

3. The method of claim 1 wherein the known entity is one of a product, service, and brand.

4. The method of claim 1 wherein one of the RFI and the signed assertion includes an identity specifier comprising at least one of an authenticated identity, Uniform Resource Identifier (“

URI”

)-based identity, a pseudonymous identity, a revocably anonymous identity, a group identity, a confirmed identity, a cryptographic identity, a possession-based identity, and a biometric-based identity.

5. The method of claim 1 wherein the generating a signed assertion incorporates at least one of additional information, a second signed assertion, a delivery restriction, a content restriction, a verification procedure, a reference, an annotation, and an ontology.

6. The method of claim 1 wherein the RFI comprises RFI from multiple sources.

7. The method of claim 1 wherein the receiving entity evaluates the signed assertion.

8. The method of claim 7 wherein the evaluating the signed assertion incorporates one of a time restriction, a delivery restriction, a content restriction, a cryptographic procedure, and a verification procedure.

9. The method of claim 1 wherein the bound piece of content is aggregated with a second piece of content.

10. The method of claim 9 wherein the second piece of content is bound to a second reputation statement.

11. The method of claim 10 wherein the second reputation statement is from a third entity.

12. A method comprising:

receiving a signed assertion bound to a piece of content, wherein the signed assertion presents information associated with a first entity and is signed by a second entity;

evaluating the signed assertion to produce an intermediate result;

using the intermediate result to modify a reputation value associated with the first entity.

13. The method of claim 12 wherein the evaluating the signed assertion is performed using one of an operator-presentation model, a rule-defined interpretation model, a reputation function, a classification function, a web-of-confidence model, a community-connectedness model, an RFI-source-weighting model, and a confidence-chaining model.

14. The method of claim 12 wherein the evaluating the signed assertion incorporates one of a time restriction, a delivery restriction, a content restriction, a cryptographic procedure, and a verification procedure.

15. The method of claim 12 wherein the bound piece of content is aggregated with a second piece of content.

16. The method of claim 15 wherein the second piece of content is bound to a second reputation statement.

17. The method of claim 16 wherein the second reputation statement is from a third entity.

18. A system comprising:

a network coupling first, second, and third entities,

wherein the first entity is adapted to;

receive an assertion request specifying a piece of content and an identity specifier associated with the second entity;

generate a reputation statement from reputation-forming information (RFI) associated with the second entity;

generate a signed assertion by associating the piece of content with the reputation statement and signing a portion comprising one of the piece of content and the reputation statement; and

transmit the signed assertion; and

wherein the third entity is adapted to;

receive the signed assertion;

evaluate the signed assertion to produce an intermediate result; and

use the intermediate result to modify a reputation value associated with the second entity.

19. The system of claim 18 wherein the signed assertion is transmitted via one of a direct transmission, a transmission by way of the second party, and a transmission through a fourth party.

20. The system of claim 18 wherein the RFI is received from multiple sources.