MOBILE APPLICATION, IDENTITY RELATIONSHIP MANAGEMENT

• US 20130086210A1
• Filed: 05/31/2012
• Published: 04/04/2013
• Est. Priority Date: 09/29/2011
• Status: Active Grant

• Current Assignee: Oracle International Corporation (Oracle Corporation)
• Original Assignee: Oracle International Corporation (Oracle Corporation)
• Inventors: Yiu, Kwok Lun Alex, Chu, Ching-Wen, Brydon, Sean, Hingarajiya, Ravi
• Granted Patent: US 9,495,533 B2
• Time in Patent Office: Days
• US Class Current: 709/217
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04W 12/068 using credential vaults, e.g. password manager applications or one time password [OTP] applications

Abstract

Techniques for managing identities are provided. In some examples, identity management, authentication, authorization, and token exchange frameworks may be provided for use with mobile devices, mobile applications, cloud applications, and/or other web-based applications. For example a mobile client may request to perform one or more identity management operations associated with an account of a service provider. Based at least in part on the requested operation and/or the particular service provider, an application programming interface (API) may be utilized to generate and/or perform one or more instructions and/or method calls for managing identity information of the service provider.

Claims

1. A system, comprising:

a memory storing a plurality of instructions; and

one or more processors configured to access the memory, wherein the one or more processors are further configured to execute the plurality of instructions to;

receive an instruction to manage an identity;

model, based at least in part on the identity, an identity relationship associated with the identity as a uniform resource identifier (URI);

map the URI to a schema associated with a service provider; and

transmit the schema to the service provider for managing the identity.

2. The system of claim 1, wherein the instruction is received from a mobile client application, a Rich Internet Application (RIA), or a software as a service (SaaS) application.

3. The system of claim 1, wherein the instruction to manage the identity is formatted as a representational state transfer (REST) call.

4. The system of claim 1, wherein the identity relationship comprises the identity and identification of an association between the identity and another entity.

5. The system of claim 4, wherein the identity relationship is modeled as the URI based at least in part on a string of characters including the identity and the association.

6. A computer-implemented method, comprising:

receiving, by a computer system, an instruction to manage an identity relationship, the instruction received from a client application;

generating, by the computer system, a uniform resource identifier (URI) to represent the identity relationship;

mapping, by the computer system, the generated URI to a schema associated with a service provider; and

transmitting, by the computer system, the schema to the service provider for managing the identity relationship.

9. The computer-implemented method of claim 6, wherein the instruction to manage the identity relationship is received as a REST call independent of an application programming interface (API) of the service provider.

10. The computer-implemented method of claim 6, wherein the schema associated with the service provider comprises a service provider interface for communicating instructions to the service provider.

11. The computer-implemented method of claim 10, wherein the instruction indicates an identity relationship operation to be performed by the service provider.

7. The computer-implemented method of 6, wherein the instruction to manage the identity includes the identity relationship.

8. The computer-implemented method of 6, wherein the identity relationship comprises an identity and an association between the identity and another entity.

12. A computer-readable memory storing a plurality of instructions executable by one or more processors, the plurality of instructions comprising:

instructions that cause the one or more processors to receive, from a client application, a uniform resource identifier (URI) indicating a service provider, an identity of an entity, and an association of the identity;

instructions that cause the one or more processors to determine, based at least in part on the received URI, an identity relationship instruction;

instructions that cause the one or more processors to generate a mapping between the determined identity relationship instruction and a schema associated with the service provider; and

instructions that cause the one or more processors to transmit, to the service provider, the schema corresponding to the determined identity relationship instruction.

13. The computer-readable memory of claim 12, wherein the URI is received as a REST call.

14. The computer-readable memory of claim 12, wherein the association indicates a relationship between the identity and another entity.

15. The computer-readable memory of claim 12, wherein the URI is based at least in part on a string of characters including the service provider and at least one of the identity, the association, or an identity of another entity.

16. The computer-readable memory of claim 12, wherein the client application is a mobile application of a mobile device, a Rich Internet Application (RIA) or a software as a service (SaaS) application.

17. The computer-readable memory of claim 12, wherein the generated mapping is protected by a security filter.

18. The computer-readable memory of claim 12, wherein the schema associated with the service provider comprises a service provider interface for communicating instructions to the service provider.

19. The computer-readable memory of claim 12, wherein the service provider comprises one or more pluggable identity management services.

20. The computer-readable memory of claim 12, wherein a first schema corresponding to a first service provider is different from a second schema corresponding to a second service provider based at least in part on respective application programming interfaces (APIs) for the first and second service providers.