System and method for associating a universal user indentification and a domain specific user identification

• US 20120151564A1
• Filed: 12/08/2010
• Published: 06/14/2012
• Est. Priority Date: 12/08/2010
• Status: Active Grant

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Robert, Arnaud, Drake, Edward C.
• Granted Patent: US 8,769,646 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

There is presented a system and method for associating a domain transcendent identification (ID) of a user and a domain specific ID of the user, the system comprising an ID association server accessible by a plurality of secure domains over a network. The system also includes an ID associator application that when executed by ID association server is configured to receive a domain specific ID that associates the user to the secure domain, enter the domain specific ID in a domain transcendent ID record created for the user, generate a unique data associated with the domain transcendent ID record and identify a network location for submission of the unique data, send the unique data and the network location to the user, and associate the domain transcendent ID and the domain specific ID.

Claims

1. A system for associating a domain transcendent identification (ID) of a user and at least one domain specific ID of the user, the system comprising:

an ID association server accessible by a plurality of secure domains over a network;

an ID associator application that when executed by the ID association server is configured to;

receive a first domain specific ID that associates the user to a respective first secure domain of the plurality of secure domains;

enter the first domain specific ID in a domain transcendent ID record created for the user;

generate a unique data associated with the domain transcendent ID record and identify a network location for the user to submit the unique data;

send the unique data and the network location to the user via the first secure domain; and

associate the domain transcendent ID and the first domain specific ID.

2. The system of claim 1, wherein the system associates the domain transcendent ID and the first domain specific ID as part of an e-commerce transaction between the user and the first secure domain.

3. The system of claim 1, wherein the system associates the domain transcendent ID and the first domain specific ID as part of a user login process of the first secure domain.

4. The system of claim 1, wherein the system associates the domain transcendent ID and the first domain specific ID as a result of a user response to a communication initiated by the first secure domain to the user.

5. The system of claim 1, wherein the system associates the domain transcendent ID and the first domain specific ID as a result of a user response to a communication provided by the first secure domain to the user outside a user session of the first secure domain.

6. The system of claim 1, wherein the network location comprises a Uniform Resource Locator (URL).

7. The system of claim 1, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the first secure domain.

8. The system of claim 1, wherein the network location corresponds to an authorization gateway of the system.

9. The system of claim 1, wherein the network location corresponds to an authorization gateway of the system, the authorization gateway configured to mediate authentication of the user by any of a plurality of trusted third-party identity providers.

10. The system of claim 1, wherein the ID associator application is further configured to receive the unique data and an authentication data for the user via the network location before associating the domain transcendent ID and the first domain specific ID.

11. The system of claim 10, wherein the authentication data includes the domain transcendent ID.

12. The system of claim 10, wherein the system receives the unique data and the authentication data after delivery of a good procured by the user in an e-commerce transaction with the first secure domain.

13. The system of claim 10, wherein the authentication data is provided by a trusted third-party identity provider.

14. The system of claim 13, wherein the trusted third-party identity provider is selected by the user from a plurality of trusted third-party identity providers including the trusted third-party identity provider.

15. The system of claim 13, wherein the system is further configured to enable the user to change the trusted third-party identity provider after the domain transcendent ID and the first domain specific ID are associated.

16. The system of claim 1, wherein the ID associator application is further configured to:

receive a second domain specific ID that associates the user to a respective second secure domain of the plurality of secure domains;

enter the second domain specific ID in the domain transcendent ID record;

generate another unique data associated with the domain transcendent ID record and identify another network location for the user to submit the another unique data;

send the another unique data and the another network location to the user via the second secure domain;

receive the another unique data and another authentication data for the user via the another network location; and

associate the domain transcendent ID and the second domain specific ID, thereby associating the first domain specific ID and the second domain specific ID in the domain transcendent ID record.

17. The system of claim 16, wherein the another authentication data is provided by a trusted third-party identity provider.

18. The system of claim 1, wherein the ID associator application is further con1d to link the domain transcendent ID of the user with another domain transcendent ID of the user to create an integrated logical domain transcendent user ID.

19. The system of claim 18, wherein the integrated logical domain transcendent user ID further associates all domain specific IDs associated with the domain transcendent ID of the user and all domain specific IDs associated with the another domain transcendent ID of the user.

20. A method for use by a system accessible to a plurality of secure domains over a network to associate a domain transcendent identification (ID) of a user and at least one domain specific ID of the user, the method comprising:

receiving a first domain specific ID that associates the user to a respective first secure domain of the plurality of secure domains;

entering the first domain specific ID in a domain transcendent ID record created for the user;

generating a unique data associated with the domain transcendent ID record and identifying a network location for the user to submit the unique data;

sending the unique data and the network location to the user via the first secure domain; and

associating the domain transcendent ID and the first domain specific ID.

21. The method of claim 20, wherein the associating of the domain transcendent ID and the first domain specific ID is part of an e-commerce transaction between the user and the first secure domain.

22. The method of claim 20, wherein the associating of the domain transcendent ID and the first domain specific ID is part of a user login process of the first secure domain.

23. The method of claim 20, wherein the associating of the domain transcendent ID and the first domain specific ID occurs as a result of a user response to a communication initiated by the first secure domain to the user.

24. The method of claim 20, wherein the associating of the domain transcendent ID and the first domain specific ID occurs as a result of a user response to a communication provided by the first secure domain to the user outside a user session of the first secure domain.

25. The method of claim 20, wherein the network location comprises a Uniform Resource Locator (URL).

26. The method of claim 20, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the first secure domain.

27. The method of claim 20, wherein the network location corresponds to an authorization gateway of the system.

28. The method of claim 20, wherein the network location corresponds to an authorization gateway of the system, the method further comprising:

mediating authentication of the user by the authorization gateway;

the authentication performed by any of a plurality of trusted third-party identity providers.

29. The method of claim 20, further comprising receiving the unique data and an authentication data for the user via the network location before associating the domain transcendent ID and the first domain specific ID.

30. The method of claim 29, wherein the authentication data includes the domain transcendent ID.

31. The method of claim 29, wherein the receiving of the unique data and the authentication data occur after delivery of a good procured by the user in an e-commerce transaction with the first secure domain.

32. The method of claim 29, wherein the authentication data is provided by a trusted third-party identity provider.

33. The method of claim 32, wherein the trusted third-party identity provider is selected by the user from a plurality of trusted third-party identity providers including the trusted third-party identity provider.

34. The method of claim 32, further comprising changing the trusted third-party identity provider after the domain transcendent ID and the first domain specific ID are associated in response to a request received from the user.

35. The method of claim 20, further comprising:

receiving a second domain specific ID that associates the user to a respective second secure domain of the plurality of secure domains;

entering the second domain specific ID in the domain transcendent ID record;

generating another unique data associated with the domain transcendent ID record and identifying another network location for the user to submit the another unique data;

sending the another unique data and the another network location to the user via the second secure domain;

receiving the another unique data and another authentication data for the user via the another network location; and

associating the domain transcendent ID and the second domain specific ID, thereby associating the first domain specific ID and the second domain specific ID in the domain transcendent ID record.

36. The method of claim 35, wherein the another authentication data is provided by a trusted third-party identity provider.

37. The method of claim 20, further comprising linking the domain transcendent ID of the user with another domain transcendent ID of the user to create an integrated logical domain transcendent user ID.

38. The method of claim 37, wherein the integrated logical domain transcendent user ID further associates all domain specific IDs associated with the domain transcendent ID of the user and all domain specific IDs associated with the another domain transcendent ID of the user.