System and method for identity confirmation of a contact published on a network

• US 7,437,566 B2
• Filed: 05/01/2004
• Issued: 10/14/2008
• Est. Priority Date: 05/01/2004
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Kumar, Arvind, Oreizy, Peyman, Blagsvedt, Sean O., Moore, Kevin R.
• Primary Examiner(s): Peeso; Thomas R
• Application Number:
  US10/837,131
• Publication Number:
  US 20050246544A1
• Time in Patent Office: 1,627 Days
• Field of Search: 713/182, 713/183, 713/185, 713/193, 713/178
• US Class Current: 713/182
• CPC Class Codes: H04L 2209/60 Digital content management, e.g. content distribution
• CPC Class Codes: H04L 2209/80 Wireless
• CPC Class Codes: H04L 63/126 the source of the received data
• CPC Class Codes: H04L 9/3236 using cryptographic hash functions
• CPC Class Codes: H04L 9/3297 involving time stamps, e.g. generation of time stamps

Abstract

A system and method is provided for confirmation of the identity of a contact on the network. A notification that a nearby user is present on a network is signed with a private key associated with the nearby user. The private key is also associated with a public key. A local user that has the nearby user'"'"'s public key can verify the signature on the notification and confirm that the nearby user is the source of the notification. The verification of identity of the nearby user allows rich content previously stored for the nearby user to be displayed along with the nearby user'"'"'s presence information.

Claims

1. A computer-implemented method for identity confirmation of a user on a network, comprising:

receiving a presence notification of a user that indicates that the user is nearby on the network and is available;

wherein the presence notification includes data that comprises a display name for the user;

a sharing address for the user that resolves to a local machine address for the user;

a timestamp; and

a hash of a public key that is used to verify the identify of the user;

wherein the data is signed with a private key;

accessing a disseminated public key associated with the user;

generating an equivalent hash by hashing the disseminated public key; and

confirming the identity of the user when the hash of the public key contained within the data matches the equivalent hash.

2. The computer-implemented method of claim 1, wherein the presence notification for the user that is published on the network is automatically published periodically while the user remains available on the network.

3. The computer-implemented method of claim 2, wherein the hash of the key received within the data is hashed with random data.

4. The computer-implemented method of claim 2, wherein the identify of the user is not confirmed when the timestamp indicates that a period of time has expired.

5. The computer-implemented method of claim 2, wherein the identify of the user is confirmed each time the presence notification is received.

6. The computer-implemented method of claim 1, wherein the user is confirmed to correspond to an entry in a contacts folder when the identity of the user is confirmed.

7. The computer-implemented method of claim 6, wherein rich content corresponding to the entry is displayed with a notification that the user is present on the network.

8. The computer-implemented method of claim 7, wherein the rich content includes at least one of a phone number, an address, and a picture corresponding to the nearby contact.

9. The computer-implemented method of claim 7, wherein the notification that the user is present on the network includes at least one of the display name, the sharing address, and an online status corresponding to the user.

10. A computer-readable storage medium that includes computer-executable instructions for identity confirmation of a user on a network, comprising:

receiving a presence notification of a user that indicates that the user is nearby on the network and is available;

wherein the presence notification includes data that comprises a display name for the user;

a sharing address for the user that resolves to a local machine address for the user; and

a public key that is used to verify the identify of the user;

wherein the data is signed with a private key;

accessing a first copy of the public key that is associated with the user;

determining whether the data published on the network that is signed with a private key associated with the public key includes a second copy of the public key; and

confirming that the first copy of the public key and the second copy of the public key match so that the identity of the user is confirmed as the nearby contact.

11. The computer-readable storage medium of claim 10, wherein the identify of the user is not confirmed when a timestamp included within the data indicates that a period of time has expired.

12. The computer-readable medium of claim 10, wherein the second copy of the public key is hashed.

13. The computer-readable storage medium of claim 10, wherein the first copy of the public key is hashed for the comparison of the first copy of the public to the second copy of the public key, such that it is the hashed versions of the copies of the public key that are compared.

14. The computer-readable storage medium of claim 10, wherein the user is confirmed to correspond to an entry in a contacts folder when the identity of the user is confirmed.

15. The computer-readable storage medium of claim 14, wherein rich content corresponding to the entry is displayed with a notification that the user is present on the network.

16. The computer-readable storage medium of claim 15, wherein the rich content includes at least one of a phone number, an address, and a picture corresponding to the user.

17. The computer-readable medium of claim 15, wherein the notification that the user is present on the network includes a display name, a sharing address, and an online status corresponding to the user.

18. A system for identity confirmation of a user on a network, comprising:

a computing device that includes an application that is configured to;

receive a presence notification of a user that indicates that the user is nearby on the network and is available;

wherein the presence notification includes data that comprises a display name for the user; and

a public key that is used to verify the identify of the user;

access a copy of the public key associated with the user; and

confirm that the copy of the public key is the key associated with the data in the presence notification to confirm the identify of the user.

19. The system of claim 18, wherein the data is signed with a private key, wherein the private key is associated with the public key that is included in data.

20. The system of claim 19, wherein the public key within the data is hashed.

21. The system of claim 19, wherein the data includes a timestamp that provides an interval of time that after the expiration of the interval of time the identify of the user is not confirmed.

22. The system of claim 19, wherein the public key is hashed with random data.

23. The system of claim 18, wherein the user is confirmed to correspond to an entry in a contacts folder when the identity of the user is confirmed as the nearby contact.

24. The system of claim 23, wherein rich content corresponding to the entry is displayed with a notification that the user is present on the network.