Reciprocal public trust relationship

• US 7,912,960 B2
• Filed: 06/20/2005
• Issued: 03/22/2011
• Est. Priority Date: 06/20/2005
• Status: Active Grant

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Bansod, Aditya, Little, Charles Reeves, Walter, Jason D.
• Primary Examiner(s): Nguyen, Thu Ha T
• Application Number:
  US11/158,275
• Publication Number:
  US 20060288073A1
• Time in Patent Office: 2,101 Days
• Field of Search: 709/227, 709/225, 709/229, 709/249, 713/193, 370/232, 370/259, 726/1, 705/10, 705/53
• US Class Current: 709/227
• CPC Class Codes: H04L 63/061 for key exchange, e.g. in peer-to-peer networks cryptographic mechanisms or cryptographic arrangements for key agreement H04L9/0838
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]

Abstract

Publicly accessible linking information is to establish a trusted relationship between reciprocally linked entities controlling web resources, such as websites or web logs. A method of establishing a trust relationship between two entities identifying a user-installed link to a second web resource in a first web resource. Next, the method determines when a reciprocal link is made in the second web resource directed to the first web resource and creates a trust relationship between the entities based on the reciprocal link.

Claims

1. A method of establishing a trust relationship between entities each controlling a respective web resource, comprising:

receiving a first unique identifier associated with a first entity controlling a first web resource from a first web service upon the first entity establishing a link to a second web resource in the first web resource, the second web resource having public content and private content, the private content viewable only by users who have been authorized by an owner of the second web resource;

determining when a reciprocal link is made in the second web resource directed to the first web resource, wherein the reciprocal link is made by a second entity controlling the second web resource;

creating a trust relationship between the first and second entities based on the reciprocal link by exchanging identifiers between the first web resource and the second web resource, the exchanging identifiers comprising;

transmitting the first unique identifier associated with the first entity from the first web resource to the second web resource;

receiving the first unique identifier associated with the first entity at the second entity associated with the second web resource;

transmitting a second unique identifier associated with the second entity from the second web resource to the first web resource;

receiving the second unique identifier associated with the second entity controlling the second web resource at the first web resource; and

verifying that the trust relationship has been established between the first entity and the second entity based on the exchanging identifiers; and

providing permission to the first entity controlling the first web resource to view the private content on the second web resource upon verifying that the trust relationship has been established between the first and second entities.

2. The method of claim 1 wherein the first web resource or the second web resource is a website.

3. The method of claim 1 wherein the first web resource or the second web resource is a web log.

4. The method of claim 3 wherein the step of receiving includes identifying an entry in a blog roll.

5. The method of claim 1 wherein the step of receiving includes providing the first unique identifier from the first web resource to the second web resource.

6. The method of claim 5 wherein the step of receiving includes providing a unique URL for the first web resource to the second web resource.

7. The method of claim 5 wherein the step of receiving includes providing a first unique key and a second unique key between the first and the second resource with the first unique identifier and the second unique identifier.

8. The method of claim 7 wherein the step of receiving includes receiving the second unique key from the second web resource.

9. The method of claim 5 wherein the step of determining includes receiving a second unique identifier from the second web resource to the first web resource.

10. The method of claim 1 wherein the step of receiving includes providing the first unique identifier and a first key from the first web resource to the second web resource, and the step of creating includes receiving the second unique identifier and a second key from the second web resource, and the method further includes encrypting web communications between the first web resource and the second web resource.

11. The method of claim 1 further including updating the trust relationship by exchanging new identifiers between the first and second web resources.

12. The method of claim 1 further including the step of revoking the trust relationship by removing the user installed link.

13. The method of claim 1 wherein the entity is a user.

14. The method of claim 1 wherein the entity is a group.

15. The method of claim 1, wherein the step of providing permission to the first entity comprises the steps of:

receiving from the first entity controlling the first web resource the second unique identifier associated with the second entity that was delivered to the first entity in establishing the trust relationship and the first unique identifier associated with the first entity;

verifying that the second unique identifier associated with the second entity received from the first entity matches the second unique identifier associated with the second entity; and

verifying that the second entity controlling the second web resource delivered the second unique identifier associated with the second entity to the first entity.

16. A method of establishing a trust relationship between two entities, comprising:

(a) identifying a publication of a first user'"'"'s blog in a second user'"'"'s blogroll located in the second user'"'"'s blog, wherein the second user'"'"'s blogroll is a list of third-party blogs that the second user reads;

(b) transmitting a second unique identifier associated with the second user'"'"'s blog to the first user'"'"'s blog;

(c) receiving a notification of a publication of the second user'"'"'s blog in the first user'"'"'s blogroll, the notification includes a first unique identifier associated with the first user'"'"'s blog, wherein the first user'"'"'s blogroll is a list of third-party blogs that the first user reads;

(d) receiving a request from the first user to read private content in the second user'"'"'s blog that requires permission to view, wherein the request includes the first unique identifier associated with the first user'"'"'s blog and the second unique identifier associated with the second user'"'"'s blog;

(e) establishing a trust relationship between the first user'"'"'s blog and the second user'"'"'s blog based on exchanging identifiers between the first user'"'"'s blog and the second user'"'"'s blog, the exchanging identifiers comprising;

the first user'"'"'s blog recording the second unique identifier associated with the second user'"'"'s blog and the second user'"'"'s blog recording the first unique identifier associated with the first user'"'"'s blog; and

verifying that the trust relationship has been established between the first user'"'"'s blog and the second user'"'"'s blog based on the exchanging identifiers; and

(f) providing permission to the first user to view private content on the second user'"'"'s blog upon verifying that the first unique identifier associated with the first user'"'"'s blog received in step (d) matches the first unique identifier associated with the first user'"'"'s blog received in step (c) and the second unique identifier associated with the second user'"'"'s blog received in step (d) matches the second unique identifier associated with the second user'"'"'s blogroll transmitted in step (b).

17. The method of claim 16 wherein the step (b) includes transmitting a Uniform Resource Locator associated with the second user'"'"'s blog to the first user'"'"'s blog.

18. The method of claim 17 wherein the step (d) includes receiving a Uniform Resource Locator associated with the first user'"'"'s blog.