Application programming interface for centralized storage of principal data

• US 7,593,951 B2
• Filed: 05/30/2006
• Issued: 09/22/2009
• Est. Priority Date: 10/23/2003
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Rimer, Matthew, Karmarkar, Nitin, Satagopan, Murli, Cameron, Kim, Harjanto, Andy, Hacherl, Don
• Primary Examiner(s): Pardo; Thuy N
• Application Number:
  US11/444,643
• Publication Number:
  US 20070094301A1
• Time in Patent Office: 1,211 Days
• Field of Search: 707/3, 707/10, 707/101, 707/102, 707/103.Y, 707/104.1, 711/216, 709/206, 709/218, 709/224, 717/106, 717/103, 717/116, 705/1
• US Class Current: 1/1
• CPC Class Codes: G06F 9/4493 Object persistence
• CPC Class Codes: Y10S 707/99942 Manipulating data structure, e.g. compression, compaction, compilation
• CPC Class Codes: Y10S 707/99943 Generating database or data structure, e.g. via user interface
• CPC Class Codes: Y10S 707/99944 Object-oriented database structure
• CPC Class Codes: Y10S 707/99945 Object-oriented database structure processing

Abstract

In the present invention, data relating to principals known to a computer system is centrally stored and objects having a standardized principal application programming interface (API) for finding, managing and accessing that data is provided to applications in lieu of having the applications independently store the principal data. The present invention eliminates the need for each application to create duplicate principal data. It also ensures that principal data are consistent throughout the applications on the computer system. In addition, the present invention allows any application with objects having the principal API to manage and change the principal data making such principal data easy to update. The principal API includes methods to find principals based on an identity reference to a principal or an identity claim that uniquely identifies the principal on computer system.

Claims

1. A method in a computer system for managing principal data, the computer system having a central data store for storing principal data for a plurality of principals, the method comprising:

identifying, for each principal, one or more identity claims that uniquely identifies the principal, wherein the one or more identity claims identify a type of the principal, a class of the principal, and a data store storing the principal;

providing the principal data to a plurality of disparate applications via component objects having at least one identity reference and wherein each of the plurality of disparate applications call a standardized principal application programming interface (API) to access the principal data, the standardized principal API containing methods for accessing the central data store, instantiating principal objects, and retrieving principal data.

2. The method of claim 1 wherein identifying comprises:

identifying at least one identity claim for each principal known to the computer system.

3. The method of claim 2 wherein at least one of the one or more identity claims for each principal is independently selected from the group consisting of a telephone number, an email address, a name, a security identifier, a globally unique identifier, a social security number, an employee number, a student number, a drivers license number, a credit card number, and a physical address.

4. The method of claim 2 wherein the standardized principal API includes a findbyidentity method that, when passed a first identity reference, searches the central data store for the first identity claim identified by the first identity reference and instantiates a principal object having the first identity claim.

5. The method of claim 2 wherein each identity claim includes an identity claim value and an identity claim scheme and the standardized principal API includes a method that, when passed an identity claim value but not an identity claim scheme, searches the central data store for an identity claim of a default identity claim scheme having the identity claim value and instantiates a principal object having an identity claim with the identity claim value and the default identity claim scheme.

6. The method of claim 2 wherein each identity claim includes an identity claim value and a identity claim scheme and the standardized principal API includes a method that, when passed a first identity claim value and a first identity claim scheme, searches the central data store for an identity claim having the first identity claim value and first identity claim scheme and instantiates a principal object having an identity claim with the first identity claim value and first identity claim scheme.

7. The method of claim 1 further comprising:

monitoring the data received by the plurality of disparate applications for new principal data not already stored in the central data store; and

storing the new principal data in the central data store.

8. The method of claim 2 wherein each identity claim includes an identity claim value and a identity claim scheme and the standardized principal API includes a method that, when passed a store identifier identifying the central store, a first identity claim value and a first identity claim scheme, searches the central data store for an identity claim having the first identity claim value and first identity claim scheme and instantiates a principal object having an identity claim with the first identity claim value and first identity claim scheme.

9. The method of claim 2 wherein each identity claim includes an identity claim value and a identity claim scheme and the standardized principal API includes a method that, when passed a principal type identifier identifying a first principal type, a first identity claim value and a first identity claim scheme, searches the central data store for a principal of the first principal type having an identity claim having the first identity claim value and first identity claim scheme and instantiates a principal object having an identity claim with the first identity claim value and first identity claim scheme.

10. The method of claim 2 wherein each principal includes one or more identity claims and the standardized principal API includes a method that, when passed a first identity reference, searches the central data store for principals having the first identity claim identified by the first identity reference and instantiates the principal object having the first identity reference.

11. The method of claim 10 wherein each identity reference includes an identity reference value and a identity reference scheme and the standardized principal API includes a method that, when passed a first identity reference value but not an identity reference scheme, searches the central data store and instantiates a principal object having an identity claim having the first identity reference value and a default identity reference scheme.