Identity management user experience

• US 8,032,562 B2
• Filed: 03/29/2005
• Issued: 10/04/2011
• Est. Priority Date: 03/29/2005
• Status: Expired due to Fees

• Current Assignee: Microsoft Technology Licensing LLC (Microsoft Corporation)
• Original Assignee: Microsoft Corporation
• Inventors: Harvey, Marcus, Dunn, Melissa W.
• Primary Examiner(s): Robinson; Greta
• Assistant Examiner(s): Wilcox; James J
• Application Number:
  US11/093,068
• Publication Number:
  US 20060224611A1
• Time in Patent Office: 2,380 Days
• Field of Search: None
• US Class Current: 707/803
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

Example embodiment of the present invention provide for assisting a user in managing the user'"'"'s shared persona on a request-by-request basis. Upon requesting to share one or more types of identity information, the user is automatically presented with an interface through which the user can interact in selecting an amount of identity items to share. A subset of the total identity items selected may then be shared with specified entities. In another embodiment, the present invention assists a user in managing identity information that has been shared with others by providing the user with a visual list of entities for which the user has shared specified identity information. Other embodiments of the present invention use shared information about an entity to automatically provide the user with the ability to update identity information that has subsequently been edited.

Claims

1. At a computing device in a distributed system, a method of assisting a user in managing the user'"'"'s shared persona on a request-by-request basis by automatically presenting the user with an interface through which the user can interact with to select an amount of identity information the user is willing to share with a specified entity, the method comprising acts of:

the computing device receiving a request for a user having identity information accessible to the computing device to share the user'"'"'s identity information with a third party;

in response to the request, automatically displaying a new user interface to the user at the computing device, the new user interface enabling the user to selectively control which of the user'"'"'s identity information to share with the third party in response to the request, the new user interface including;

a plurality of contact information labels;

a list of a plurality of identity items which are sharable with the third party, the plurality of identity items corresponding to the user'"'"'s identity information as identified by the plurality of contact information labels;

an item-by-item selection mechanism comprising interactive graphical objects, including at least one of check boxes, radio buttons or highlighting elements, by which each of the plurality of identity items for the user is independently selectable and deselectable, thereby allowing the user to, from the new user interface, select any combination of the plurality of listed identity items for sharing with the third party, including a plurality of items, and while continuing to display each of the plurality of contact information labels and each of the plurality of identity items for the user; and

receiving input from the user selecting or deselecting one or more identity items from the list of the plurality of identity items;

based on the user input, sending the user'"'"'s identity information corresponding to the selected one or more identity items to the third party;

accessing a log file that includes shared information about the one or more entities, including the third party, with whom the user has shared one or more specified identity items, as well as information about the one or more entities that includes at least an address associated with each of the one or more entities;

receiving a request from the user to update the one or more specified identity items with edited information;

automatically, in response to the user request to update and based on the shared information in the log file, displaying a list of the one or more entities that have received the one or more specified identity items;

prompting the user to identify one or more identified entities of the one or more listed entities to have the edited information sent to; and

sending the edited information to the one or more identified entities using at least the address associated with each of the one or more entities.

2. The method of claim 1, wherein prior to automatically displaying the user interface that includes the list of identity items, the method further comprises acts of:

presenting the user with a visual display of the available types of identity information the user can select from; and

receiving user input selecting one or more of the types of identity information for sharing with the one or more entities, and wherein the automatic display of the user interface that includes a list of identity items is further based on the selection of the one or more types of identity information.

3. The method of claim 2, wherein the list of identity items for the user'"'"'s personal contact information include one or more of a name, home address, telephone number, email address, instant messaging address, birthday, likes, dislikes, a picture, and wherein the list of identity items for the user'"'"'s business contact information include one or more of the user'"'"'s name, a company name, company address, email alias, fax number, telephone number, job title for the user, and wherein the list of identity items for the user'"'"'s legal information includes one or more of a credit card number, a social security number, state identification number, or some other sensitive information that a user would be unwilling or uncomfortable to share publicly.

4. The method of claim 3, wherein the legal information is encrypted and the user must use one or more of a password, user name, or smartcard to decrypt the legal information.

5. The method of claim 4, wherein at least a portion of the encrypted legal information is stored on a server.

6. The method of claim 3, wherein at least one of the available types of identity information is the digital identity for the user, and wherein the digital identity information includes a plurality of identity items corresponding to different digital identities for the user, and wherein the user selects one or more of the different digital identities for sharing with the one or more entities.

7. The method of claim 1, wherein the list of identity items have a default setting selecting an automatic subset of the list of identity items, and wherein a template created from the user is used to identity the default settings.

8. At a computing device in a distributed system, a method of assisting a user to update identity information by automatically providing the user the ability to update identity information shared upon editing the identity information, the method comprising acts of:

receiving a request from a user to edit the user'"'"'s own identity information, which identity information includes one or more available types of identity information including one or more of the user'"'"'s personal contact information, the user'"'"'s contact business information, the user'"'"'s legal information, or a digital identity for the user;

receiving user input changing at least one identity item within the one or more available types of information, the input being received through an interface that allows the user to make an item-by-item selection of identity items to send to one or more entities, as well as to edit the at least one identity item, the identity information corresponding to the at least one identity item having been sent to the one or more entities in response to previous user input;

identifying that the at least one identity item has changed in response to the user input;

automatically, in response to identifying that the at least one identity item has changed, scanning a log and determining one or more entities that the at least one identity item has been shared with prior to being changed, wherein the log specifically identifies the one or more entities that the at least one identity item was shared with, as well as at least one address associated with each of the one or more entities; and

based on the determined one or more entities from the log, automatically updating the identity information on the one or more entities'"'"' computing devices in accordance with the changes from the user input and by sending updated information corresponding to the changed identity item to the one or more entities using the at least one address associated with each of the one or more entities.

9. The method of claim 8, wherein prior to automatically updating the identity information, the user is presented with a prompt asking the user if the identity information should be updated the one or more entities'"'"' computing devices.

10. The method of claim 8, wherein the identity information on at least one of the one or more entities'"'"' computing devices cannot be automatically updated due to access restrictions, and wherein a message is sent to the user informing them of the access restriction.

11. The method of claim 10, wherein a message is also sent to the one or more entities indicating to them that the identity information has changed.

12. The method of claim 11, wherein the message sent to the one or more entities includes an update of the identity information.

13. The method of claim 8, wherein the legal information is encrypted and the user must enter a password, user name, or both, to decrypt the legal information before being allowed to edit one or more identity items for the legal information.

14. The method of claim 13, wherein at least a portion of the encrypted legal information is stored on a server.

15. The method of claim 12, wherein,

the user'"'"'s identity information includes each of the user'"'"'s personal contact information, the user'"'"'s contact business information, the users legal information, and a digital identity for the user, and wherein receiving a request to edit the user'"'"'s identity information comprises:

determining that all of the legal information and at least some of the user'"'"'s other identity information is secured by a lock, thereby marking the information as sensitive and for edit only in a secure environment requiring user authentication, wherein user authentication requires at least one of;

(i) a username and password combination;

(ii) a password;

or (iii) a smartcard, for authentication to authorize decrypting and editing of the information;

determining that at least some of the user'"'"'s personal contact information, business information or digital identity are not secured by a lock, thereby allowing the information to be edited outside of the secure environment;

the method further includes saving the identity information as updated identity information after receiving the user input changing the at least one identity item;

accessing the log is performed automatically, upon saving the updated identity information; and

automatically updating the identity information on the one or more entities'"'"' computing devices includes, for each entity determined from the log to have received identity information corresponding to the updated identity information;

determining an address of the entity in the log;

determining a transport for use in updating the identity information on the one or more entities'"'"' computing devices; and

prompting the user for a list of other entities for which the user has shared identity information corresponding to the updated identity information.

16. The method of claim 13, wherein at least a portion of the encrypted legal information is stored on the user'"'"'s computing device.