Performing a business transaction without disclosing sensitive identity information to a relying party

• US 8,073,783 B2
• Filed: 08/22/2007
• Issued: 12/06/2011
• Est. Priority Date: 03/16/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: CPTN Holdings LLC
• Inventors: Felsted, Patrick R., Doman, Thomas E., Sermersheim, James G., Sanders, Daniel S., Hodgkinson, Andrew A., Olds, Dale R.
• Primary Examiner(s): Elisca, Pierre Eddy
• Assistant Examiner(s): Kamal, Shahid
• Application Number:
  US11/843,572
• Publication Number:
  US 20080229410A1
• Time in Patent Office: 1,567 Days
• Field of Search: 705 1- 79, 380/24, 713/156, 713/172
• US Class Current: 705/64
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A user engages in a transaction with a relying party. The relying party requests identity information from the user in a security policy and identifies transaction elements for an on-line business transaction. Typically, the security policy and transaction elements are transmitted together; the security policy can be as little as a request to conduct the on-line business transaction. The user identifies an information card that satisfies the security policy. The computer system requests a security token from the identity provider managing the information card, which can include requesting a transaction receipt for the transaction elements. The computer system then returns the security token (and the transaction receipt) to the relying party, to complete the transaction.

Claims

1. An apparatus, comprising:

a machine;

a card selector on the machine to receive from a user a selection of an information card from a plurality of information cards stored on the machine;

a receiver to receive a security policy used in identifying said information card, said security policy including elements of a transaction, from a relying party, and a security token responsive to said security policy from an identity provider; and

a transmitter to transmit said security policy to said identity provider and said security token to said relying party, said security token responsive to said security policy,

wherein said identity provider completes said transaction using said elements of said transaction, said security policy includes elements of a transaction, and said security token includes information about said identity provider completing said transaction and is at least partially responsive to said elements of a transaction.

2. An apparatus according to claim 1, wherein said information card includes information that can complete said transaction.

3. An apparatus according to claim 2, wherein the information that can complete said transaction includes an identifier of an account number.

4. An apparatus according to claim 2, wherein said elements of said transaction include at least one of a cost of said transaction and an identifier of said relying party.

5. An apparatus according to claim 1, wherein said security policy further includes a request for said receipt of said transaction.

6. An apparatus according to claim 1, further comprising:

a card provider registry installed on the machine; and

a set of pluggable card providers coupled to the card provider registry, each of the set of pluggable card providers operative to access at least one pluggable card store, each of said at least one pluggable card store including at least one information card.

7. An apparatus according to claim 6, wherein:

the card provider registry is operative to request and receive from each of the set of pluggable card providers a list of information cards in said at least one pluggable card store; and

each of the set of pluggable card providers is operative to enumerate the at least one information card in each of said at least one pluggable card store.

8. An apparatus according to claim 6, further comprising an authenticator to authenticate a request to access one of said at least one pluggable card stores.

9. An apparatus according to claim 6, further comprising means for registering a new pluggable card provider with the card provider registry.

10. An apparatus according to claim 6, further comprising means for deregistering one of said pluggable card stores from said machine.

11. An apparatus according to claim 6, wherein the machine includes at least one connector to connect said at least one pluggable card store to the machine.

12. An apparatus according to claim 11, wherein at least one of the set of pluggable card providers is operative to add a new pluggable card store when said new pluggable card store is connected to the at least one connector.

13. An apparatus according to claim 6, further comprising a receiver is operative to receive a credential from a user to unlock at least one of said at least one pluggable card stores.

14. A method for conducting a transaction with a relying party, comprising:

identifying elements of the transaction;

receiving at a first computer a security policy from a second computer of the relying party, the security policy including the elements of the transaction;

receiving at the first computer an identifier of a selected information card to conduct the transaction from a plurality of information cards stored on the machine, the information card satisfying the security policy;

requesting at the first computer a security token from a third computer of an identity provider, providing the elements of the transaction to the identity provider;

completing the transaction by the third computer of the identity provider;

receiving at the first computer the security token from the third computer of the identity provider, the security token including information about the identity provider completing the transaction; and

transmitting the security token from the first computer to the second computer of the relying party.

15. A method according to claim 14, wherein:

receiving the security token from the identity provider includes receiving a transaction receipt from the identity provider; and

transmitting the security token to the relying party includes transmitting the transaction receipt to the relying party.

16. A method according to claim 14, wherein receiving an identifier of a selected information card to conduct the transaction includes receiving an identifier of a selected information card including information that can complete the transaction.

17. A method according to claim 16, wherein receiving an identifier of a selected information card including information that can complete the transaction includes receiving an identifier of a selected information card including an identifier of an account number.

18. A method according to claim 14, wherein identifying elements of the transaction includes identifying at least one of a cost for the transaction and an identifier of the relying party.

19. A method according to claim 14, wherein receiving a security policy from the relying party includes receiving a request for a transaction receipt from the relying party.

20. A method according to claim 14, wherein:

the method further comprises;

identifying a pluggable card store that is available at a machine using a card provider registry; and

interfacing with the pluggable card store using a pluggable card provider; and

receiving an identifier of a selected information card to conduct the transaction includes receiving an identifier of an information card in the pluggable card store from a user.

21. A method according to claim 20, wherein interfacing with the pluggable card store includes unlocking the pluggable card store.

22. A method according to claim 21, wherein unlocking the pluggable card store includes:

receiving a credential from the user; and

providing the credential to the pluggable card store to enable the pluggable card store to authenticate the user.

23. A method according to claim 20, further comprising determining that the pluggable card store is no longer available at a machine.

24. A method according to claim 23, further comprising unplugging the pluggable card provider from the card provider registry.

25. A method according to claim 20, further comprising plugging the pluggable card provider into the card provider registry.

26. An article, comprising a non-transitory storage medium, said storage medium having stored thereon instructions that, when executed by a machine, result in:

identifying elements of the transaction;

receiving a security policy from the relying party, the security policy including the elements of the transaction;

receiving an identifier of a selected information card to conduct the transaction from a plurality of information cards stored on the machine, the information card satisfying the security policy;

requesting a security token from an identity provider, providing the elements of the transaction to the identity provider;

completing the transaction by the third computer of the identity provider;

receiving the security token from the identity provider, the security token including information about the identity provider completing the transaction; and

transmitting the security token to the relying party.

27. An article according to claim 26, wherein:

receiving the security token from the identity provider includes receiving a transaction receipt from the identity provider; and

transmitting the security token to the relying party includes transmitting the transaction receipt to the relying party.

28. An article according to claim 26, wherein receiving an identifier of a selected information card to conduct the transaction includes receiving an identifier of a selected information card including information that can complete the transaction.

29. An article A method according to claim 28, wherein receiving an identifier of a selected information card including information that can complete the transaction includes receiving an identifier of a selected information card including an identifier of an account number.

30. An article according to claim 26, wherein identifying elements of the transaction includes identifying at least one of a cost for the transaction and an identifier of the relying party.

31. An article according to claim 26, wherein receiving a security policy from the relying party includes receiving a request for a transaction receipt from the relying party.

32. An article according to claim 26, wherein:

said non-transitory storage medium has stored thereon further instructions that, when executed by the machine, result in;

identifying a pluggable card store that is available at a machine using a card provider registry; and

interfacing with the pluggable card store using a pluggable card provider; and

receiving an identifier of a selected information card to conduct the transaction includes receiving an identifier of an information card in the pluggable card store from a user.

33. An article according to claim 32, wherein interfacing with the pluggable card store includes unlocking the pluggable card store.

34. An article according to claim 33, wherein unlocking the pluggable card store includes:

receiving a credential from the user; and

providing the credential to the pluggable card store to enable the pluggable card store to authenticate the user.

35. An article according to claim 32, further comprising determining that the pluggable card store is no longer available at a machine.

36. An article according to claim 35, further comprising unplugging the pluggable card provider from the card provider registry.

37. An article according to claim 32, wherein said non-transitory storage medium has stored thereon further instructions that, when executed by the machine, result in plugging the pluggable card provider into the card provider registry.