CREDENTIAL CATEGORIZATION

• US 20080229383A1
• Filed: 08/22/2007
• Published: 09/18/2008
• Est. Priority Date: 03/16/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Sanders, Daniel S., Felsted, Patrick R., Hodgkinson, Andrew A., Buss, Duane F.
• Granted Patent: US 8,479,254 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The user can associate metadata with information cards. The metadata can include, among other possibilities, string names, icons, user policies, containers, and hierarchies. The metadata is stored by the computer system. The metadata can then be used to filter the set of information cards that can satisfy a security policy from a relying party.

Claims

1. An apparatus to manage information cards, comprising:

a computer (105);

storage on the computer;

at least one information card (215) stored in the storage on the computer (105); and

metadata associated with the at least one information card (215) stored in the storage on the computer (105).

2. An apparatus according to claim 1, wherein the metadata includes at least one item drawn from a set including a string name (305), an icon (310), and a user policy (315) to the information card.

3. An apparatus according to claim 1, wherein the metadata includes at least one of a plurality of identifiers (320) of a plurality of containers (325).

4. An apparatus according to claim 1, wherein the metadata includes a hierarchy (350).

5. An apparatus according to claim 1, further comprising a card selector (205) operative to identify the at least one information card (215) as satisfying a security policy (150), the card selector (205) including a filter selector (225) to enable a user to select a filter (415, 420, 430, 435, 440) for the at least one information card (215).

6. An apparatus according to claim 5, wherein the card selector (205) is operative to select the user to select the at least one information card (215) satisfying the security policy (150) and the filter (415, 420, 430, 435, 440).

7. A method for managing information cards, comprising:

identifying (505) an information card (215);

associating (510) metadata to the information card (215); and

storing (515) the metadata associated with the information card (215).

8. A method according to claim 7, further comprising:

receiving (705) a security policy (150) from a relying party (130);

receiving (730) from a user a filter (415, 420, 430, 435, 440) to apply to information cards including the information card (215);

selecting (710) the information card (215) for display to the user if the information card (215) satisfies the security policy (150) and the filter (415, 420, 430, 435, 440);

receiving (740) from the user a selected information card (215); and

using (745) the selected information card (215) to provide a security token to the relying party (130) responsive to the security policy (150).

9. A method according to claim 8, wherein receiving (730) from a user a filter (415, 420, 430, 435, 440) includes presenting (720) to the user a graphic display (405) of available filters (415, 420, 430, 435, 440).

10. A method according to claim 9, wherein receiving (730) from a user a filter (415, 420, 430, 435, 440) further includes receiving (730) from the user an indication of one the available filters (415, 420, 430, 435, 440).

11. A method according to claim 10, wherein:

the method further comprises presenting (715) to the user a list of information cards satisfying the security policy (150); and

receiving (730) from a user a filter further includes updating (735) the list of information cards presented to the user to include information cards satisfying both the security policy (150) and the identified filter (415, 420, 430, 435, 440).

12. A method according to claim 9, wherein presenting (720) to the user a graphic display (405) of available filters (415, 420, 430, 435, 440) includes displaying (720) an icon (310) for the filter with the information card (215).

13. A method according to claim 7, wherein associating metadata to the information card (215) includes associating (605) at least one item from a set including a string name (305), an icon (310), and a user policy (315) to the information card (215).

14. A method according to claim 7, wherein associating (510) metadata to the information card (215) includes associating (610) the information card (215) with at least one of a plurality of identifiers (320) of a plurality of containers (325).

15. A method according to claim 7, wherein associating (510) metadata to the information card (215) includes identifying (615) a location for the information card (215) in a hierarchy (350).

16. An article, comprising a storage medium, said storage medium having stored thereon instructions that, when executed by a machine, result in:

identifying (505) an information card (215);

associating (510) metadata to the information card (215); and

storing (515) the metadata associated with the information card (215).

17. An article according to claim 16, wherein said storage medium has stored thereon further instructions that, when executed by said machine, result in:

receiving (705) a security policy (150) from a relying party (130);

receiving (730) from a user a filter (415, 420, 430, 435, 440) to apply to information cards including the information card (215);

selecting (710) the information card (215) for display to the user if the information card (215) satisfies the security policy (150) and the filter (415, 420, 430, 435, 440);

receiving (740) from the user a selected information card (215); and

using (745) the selected information card (215) to provide a security token to the relying party (130) responsive to the security policy (150).

18. An article according to claim 17, wherein receiving (730) from a user a filter (415, 420, 430, 435, 440) includes presenting (720) to the user a graphic display (405) of available filters (415, 420, 430, 435, 440).

19. An article according to claim 18, wherein receiving (730) from a user a filter (415, 420, 430, 435, 440) further includes receiving (730) from the user an indication of one the available filters (415, 420, 430, 435, 440).

20. An article according to claim 19, wherein:

the method further comprises presenting (715) to the user a list of information cards satisfying the security policy (150); and

receiving (730) from a user a filter further includes updating (735) the list of information cards presented to the user to include information cards satisfying both the security policy (150) and the identified filter (415, 420, 430, 435, 440).

21. An article according to claim 18, wherein presenting (720) to the user a graphic display (405) of available filters (415, 420, 430, 435, 440) includes displaying (720) an icon (310) for the filter with the information card (215).

22. An article according to claim 16, wherein associating metadata to the information card (215) includes associating (605) at least one item from a set including a string name (305), an icon (310), and a user policy (315) to the information card (215).

23. An article according to claim 16, wherein associating (510) metadata to the information card (215) includes associating (610) the information card (215) with at least one of a plurality of identifiers (320) of a plurality of containers (325).

24. An article according to claim 16, wherein associating (510) metadata to the information card (215) includes identifying (615) a location for the information card (215) in a hierarchy (350).