ENHANCEMENTS TO CLAIMS BASED DIGITAL IDENTITIES

• US 20110088090A1
• Filed: 09/08/2010
• Published: 04/14/2011
• Est. Priority Date: 09/08/2009
• Status: Abandoned Application

• Current Assignee: Avoco Secure limited
• Original Assignee: Avoco Secure limited
• Inventors: Morrow, Susan E., Porter, Alexandar James John, O'Brien, Gerard D., Porter, James A.L., Battersby, Paul, Hitchen, Stephen M.
• Application Number:
  US12/877,648
• Publication Number:
  US 20110088090A1
• Time in Patent Office: Days
• US Class Current: 726/19
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 2221/2115 Third party

Abstract

A system and method of identifying a user to a digital system is disclosed. The method includes receiving a request for a value of an identification claim of a digital identity from a relying party, allowing a user to select the digital identity via an identification selector, querying an identification provider for the value of the identification claim, and providing the value of the identification claim to the relying party.

Claims

1. A system for identifying a user to a digital system, comprising:

a processor; and

a storage embedded with instructions, the instructions being executable by the processor for causing the processor to;

receive a request for a value of an identification claim of a digital identity from a relying party,

allow the user to select the digital identity via an identification selector,

query an identification provider for the value of the identification claim, and

provide the value of the identification claim to the relying party.

2. The system of claim 1 wherein the value of the identification claim is digitally signed by the identification provider.

3. The system of claim 1 wherein the identification claim is a digital rights control.

4. The system of claim 3 wherein the digital rights control is set dynamically by the identification provider.

5. The system of claim 1 wherein the processor further creates a digital certificate using the value of the identification claim.

6. The system of claim 1 wherein the identification claim includes any one or more of an encryption key, a rating of the user'"'"'s financial status, the user'"'"'s progress through various steps of an application process, the integrity of a website, the user'"'"'s health records, the user'"'"'s professional licenses, the user'"'"'s professional qualification, the user'"'"'s geographic position, the user'"'"'s credit rating, the user'"'"'s online gaming information, a monetary conversion rate, a share value, a company profile, and expiration data

7. The system of claim 1 wherein the value of the identification claim is obtained in a real-time from a third party.

8. The system of claim 1 wherein the value of the identification claim is calculated using fuzzy set theory.

9. The system of claim 1 wherein the value of the identification claim is determined by the combination of other identification claims.

10. The system of claim 1 wherein the processor further notifies the user of a change in the value of the identification claim.

11. The system of claim 1 further comprising an anti-phishing mechanism.

12. The system of claim 1 wherein the digital identity is automatically imported into the identification selector.

13. The system of claim 1 wherein the relying party specifies a permitted authentication method.

14. The system of claim 1 wherein relying party specifies acceptable digital identity providers.

15. The system of claim 1 wherein the user controls which identification claims are returned to the relying party.

16. The system of claim 1 wherein the source of the value of the identification claim is displayed to the user.

17. The system of claim 1 wherein the relying party specifies the source of the value of the identification claim.

18. The system of claim 1 wherein the value of the identification claim further includes an indication of the trust level of the identification claim.

19. The system of claim 1 wherein the identification selector is a cloud identification selection.

20. A method of identifying a user to a digital system over a computer network, the method executed by a computer server in the computer network, comprising:

receiving a request for a value of an identification claim of a digital identity from a relying party;

allowing the user to select the digital identity via an identification selector;

querying an identification provider for the value of the identification claim; and

providing the value of the identification claim to the relying party.