LEVEL OF SERVICE DESCRIPTORS

• US 20090178112A1
• Filed: 03/12/2009
• Published: 07/09/2009
• Est. Priority Date: 03/16/2007
• Status: Abandoned Application

• Current Assignee: Apple Inc.
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: Doman, Thomas E., Buss, Duane F., Busath, Wendy Michelle
• Application Number:
  US12/402,782
• Publication Number:
  US 20090178112A1
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/35 communicating wirelessly
• CPC Class Codes: G06F 21/40 by quorum, i.e. whereby two or more security principals are required
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

An apparatus can include a client having a card selector, a query generator, and a transmitter. The card selector can allow a user to select an information card based on a security policy. The card selector can also provide a security token in response to the selected information card. The query generator can generate a query based on the selected information card, wherein the query pertains to information about features that are available on a relying party based on the security token and independent of a user'"'"'s identity. The transmitter can transmit the generated query and the security token to an endpoint on the relying party.

Claims

1. An apparatus, comprising:

a client accessed by a user, said user having a user identity;

a card selector on the client to allow said user to select an information card based on a security policy and to provide a particular security token responsive to said selected information card;

a query generator on the client to generate a query based on said selected information card, said query pertaining to information about features that are available on a relying party based on said particular security token and independent of said user identity; and

a transmitter on the client to transmit said-generated query and said particular security token to an endpoint on said relying party.

2. The apparatus of claim 1, wherein said available features are drawn from a set including user privileges, relying party services, relying party capabilities, and temporal constraints.

3. The apparatus of claim 1, wherein said available features pertain to a dynamically created account on said relying party.

4. The apparatus of claim 1, further comprising a receiver on the client to receive said security policy from said relying party.

5. The apparatus of claim 1, further comprising a receiver on the client to receive a response to said transmitted query from said relying party.

6. The apparatus of claim 5, wherein the card selector is further operable to provide said user with information pertaining to said response received from said relying party.

7. The apparatus of claim 6, further comprising a display module to graphically present to said user at least some of said information pertaining to said response received from said relying party.

8. A computer-implemented method, comprising:

identifying one or more information cards accessible to a card selector;

presenting the one or more identified information cards to a user;

receiving a selection by the user of one of the one or more information cards presented to the user;

providing a security token based at least in part on the selected information card;

generating a query pertaining to information about features that are available on the relying party based on the security token and independent of an identity of the user; and

transmitting the generated query to an endpoint on a relying party.

9. The computer-implemented method of claim 8, wherein the available features are drawn from a set including user privileges, relying party services, relying party capabilities, and temporal constraints.

10. The computer-implemented method of claim 8, wherein the available features pertain to a dynamically created account on the relying party.

11. The computer-implemented method of claim 8, further comprising receiving from the relying party a response to the generated query.

12. The computer-implemented method of claim 11, further comprising providing the user with information pertaining to the response to the generated query.

13. The computer-implemented method of claim 11, further comprising displaying at least some of the information pertaining to the response to the generated query.

14. The computer-implemented method of claim 11, further comprising:

identifying one or more secondary information cards accessible to the card selector based on the response to the generated query;

presenting the one or more identified secondary information cards to the user; and

receiving a selection by the user of one of the one or more secondary information cards presented to the user.

15. The computer-implemented method of claim 14, wherein the one or more identified secondary information cards excludes the selected information card.

16. The computer-implemented method of claim 14, further comprising:

token based at least in part on the selected secondary information card;

generating a second query pertaining to information about features that are available on the relying party based on the second security token and independent of the identity of the user; and

transmitting the second generated query to the endpoint on the relying party.

17. The computer-implemented method of claim 16, further comprising receiving from the relying party a second response to the second generated query.

18. The computer-implemented method of claim 17, further comprising providing the user with information pertaining to the second response to the second generated query.

19. The computer-implemented method of claim 18, wherein providing the user with information includes displaying at least some of the information pertaining to the second response to the second generated query.

20. The computer-implemented method of claim 8, further comprising:

receiving a second selection by the user of a second one of the one or more information cards presented to the user; and

providing a second security token based at least in part on the second selected information card; and

generating a second query pertaining to information about features that are available on the relying party based on the second security token and independent of the identity of the user.

21. The computer-implemented method of claim 20, further comprising transmitting the second generated query to the endpoint on the relying party.

22. The computer-implemented method of claim 8, further comprising receiving a security policy from the relying party.

23. The computer-implemented method of claim 8, further comprising transmitting the security token to the endpoint on the relying party.

24. One or more tangible, computer-readable media storing computer-executable instructions that, when executed by a processor, cause the processor to perform the computer-implemented method of claim 8.