Evaluating relying parties

• US 7,831,522 B1
• Filed: 09/28/2006
• Issued: 11/09/2010
• Est. Priority Date: 09/28/2006
• Status: Active Grant

• Current Assignee: CA, Inc. (d/b/a CA Technologies) (Broadcom, Inc.)
• Original Assignee: Symantec Corporation (NortonLifeLock Inc.)
• Inventors: Satish, Sourabh, Hernacki, Brian
• Primary Examiner(s): Elisca; Pierre E
• Application Number:
  US11/540,999
• Time in Patent Office: 1,503 Days
• Field of Search: 705/76, 705/1
• US Class Current: 705/76
• CPC Class Codes: G06Q 20/02 involving a neutral party, e.g. certification authority, notary or trusted third party [TTP]
• CPC Class Codes: G06Q 20/12 specially adapted for electronic shopping systems
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: G06Q 20/4016 involving fraud or risk level assessment in transaction processing

Abstract

Determining reputation information is disclosed. A honey token is included in an online identity data. The honey token is to monitor for misuse of all or part of the online identity data. Optionally, information associated with at least one use of the honey token is aggregated with other reputation information.

Claims

1. A method for informing a trust decision comprising:

receiving a request at an identity provider for information associated with a trust decision about a host; and

providing, by the identity provider, information indicating a risk assessment associated with interacting with the host, wherein the risk assessment comprises assessing for at least one of;

a risk that financial information submitted to the host will be misused;

a risk that identity information submitted to the host will be misused;

a risk that the host has been compromised by a third party; and

a risk that the host provides an unsatisfactory user experience.

2. The method of claim 1 wherein the information associated with a trust decision about a host includes information received from at least one of:

a spam detection module, a phishing detection module, a threat management system, and a third party site rating source.

3. The method of claim 1 further comprising automatically determining one or more credentials to provide to the host based at least in part on the risk assessment.