System and Method for Associating a Universal User Identification and a Domain Specific User Identification

• US 20140245416A1
• Filed: 05/06/2014
• Published: 08/28/2014
• Est. Priority Date: 12/08/2010
• Status: Active Grant

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Robert, Arnaud, Drake, Edward C.
• Granted Patent: US 9,306,928 B2
• Time in Patent Office: Days
• US Class Current: 726/7
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

There is presented a system and method for associating a domain transcendent identification (ID) of a user and a domain specific ID of the user, the system comprising an ID association server accessible by a plurality of secure domains over a network. The system also includes an ID associator application that when executed by ID association server is configured to receive a domain specific ID that associates the user to the secure domain, enter the domain specific ID in a domain transcendent ID record created for the user, generate a unique data associated with the domain transcendent ID record and identify a network location for submission of the unique data, send the unique data and the network location to the user, and associate the domain transcendent ID and the domain specific ID.

Claims

1-38. -38. (canceled)

39. A method comprising:

sending, by a secure domain to a server, a domain specific ID of a user associated with the secure domain; and

receiving, by the secure domain from the server and in response to the sending of the domain specific ID, a network location and a unique data, the network location identifying an authorization gateway for authenticating the unique data, and the unique data being for associating the domain specific ID with a domain transcendent ID that is associated with at least one or more other domain specific ID of the user.

40. The method of claim 39, wherein the sending and the receiving are part of an e-commerce transaction between the user and the secure domain.

41. The method of claim 39, wherein the sending and the receiving are part of a user login process onto the secure domain.

42. The method of claim 39, wherein the network location comprises a Uniform Resource Locator (URL).

43. The method of claim 39, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the secure domain.

44. A secure domain comprising:

a processor configured to;

send, to a server, a domain specific ID of a user associated with the secure domain; and

receive, from the server and in response to sending the domain specific ID to the server, a network location and a unique data, the network location identifying an authorization gateway for authenticating the unique data, and the unique data being for associating the domain specific ID with a domain transcendent ID that is associated with at least one or more other domain specific ID of the user.

45. The secure domain of claim 44, wherein the sending and the receiving are part of an e-commerce transaction between the user and the secure domain.

46. The secure domain of claim 44, wherein the sending and the receiving are part of a user login process onto the secure domain.

47. The secure domain of claim 44, wherein the network location comprises a Uniform Resource Locator (URL).

48. The secure domain of claim 44, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the secure domain.

49. A method comprising:

receiving, by a server from a secure domain, a domain specific ID of a user associated with the secure domain; and

sending, by the server to the secure domain and in response to the receiving of the domain specific ID, a network location and a unique data, the network location identifying an authorization gateway for authenticating the unique data, and the unique data being for associating the domain specific ID with a domain transcendent ID that is associated with at least one or more other domain specific ID of the user.

50. The method of claim 49, wherein after the sending, the method further comprises:

receiving, by the server from the authorization gateway, the domain transcendent ID and the unique data.

51. The method of claim 49, wherein the sending and the receiving are part of an e-commerce transaction between the user and the secure domain.

52. The method of claim 49, wherein the sending and the receiving are part of a user login process onto the secure domain.

53. The method of claim 49, wherein the network location comprises a Uniform Resource Locator (URL).

54. The method of claim 49, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the secure domain.