Chaining information card selectors

• US 8,353,002 B2
• Filed: 11/22/2011
• Issued: 01/08/2013
• Est. Priority Date: 03/16/2007
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Norman, James Mark, Sanders, Daniel S.
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US13/302,938
• Publication Number:
  US 20120072970A1
• Time in Patent Office: 413 Days
• Field of Search: None
• US Class Current: 726/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A machine includes card stores to store information cards. For each card store, one or more card selectors can be provided. When performing a transaction involving information cards, a generic card selector, using a selector policy engine, can identify a card selector to use for the transaction. The identified card selector can be used to identify an information card in a card store to use in performing the transaction, which can be used to provide a security token to the relying party.

Claims

1. An apparatus, comprising:

a computer;

a card store;

a plurality of card selectors;

a generic card selector to receive a security policy;

a selector policy engine to identify one of the plurality of card selectors; and

means for using one of the information cards in said card store with said identified card selector to respond to the security policy.

2. An apparatus according to claim 1, wherein the selector policy engine is operative to present to a user the list of plurality of card selectors and receive from the user an identification of said identified card selector.

3. An apparatus according to claim 1, wherein the selector policy engine is operative to identify said one of the plurality of card selectors based on at least one of a set including the security policy, a user name, a user data, and a policy.

4. An apparatus according to claim 3, wherein the policy is any of a time-based policy, a location-based policy, or an adaptive policy.

5. An apparatus according to claim 1, wherein the generic card selector includes a plug-in receiver to add the identified card selector to the plurality of card selectors.

6. A method for performing a transaction using a generic card selector, comprising:

receiving a security policy from a relying party;

identifying a card selector from a plurality of card selectors;

selecting an information card from a card store; and

using the information card with the identified card selector to satisfy the security policy.

7. A method according to claim 6, wherein identifying a card selector includes receiving from a user a selection of the card selector from the plurality of card selectors.

8. A method according to claim 7, wherein receiving from a user a selection of the card selector includes presenting to the user a list of the plurality of card selectors.

9. A method according to claim 6, wherein identifying a card selector includes automatically selecting a card selector based on at least one of a set including the security policy, a user name, a user data, and a policy.

10. A method according to claim 6, wherein automatically selecting a card selector includes automatically selecting a card selector based on any of a time-based policy, a location-based policy, or an adaptive policy.

11. A method according to claim 6, further comprising receiving the card selector as a plug-in to the generic card selector.

12. An article, comprising a non-transitory storage medium, said non-transitory storage medium having stored thereon instructions that, when executed by a machine, result in:

receiving a security policy from a relying party;

identifying a card selector from a plurality of card selectors;

selecting an information card from a card store; and

using the information card with the identified card selector to satisfy the security policy.

13. An article according to claim 12, wherein identifying a card selector includes receiving from a user a selection of the card selector from the plurality of card selectors.

14. An article according to claim 13, wherein receiving from a user a selection of the card selector includes presenting to the user a list of the plurality of card selectors.

15. An article according to claim 12, wherein identifying a card selector includes automatically selecting a card selector based on at least one of a set including the security policy, a user name, a user data, and a policy.

16. An article according to claim 12, wherein automatically selecting a card selector includes automatically selecting a card selector based on any of a time-based policy, a location-based policy, or an adaptive policy.

17. An article according to claim 12, wherein said non-transitory storage medium has stored thereon further instructions that, when executed by said machine, result in receiving the card selector as a plug-in to the generic card selector.