Credential categorization

• US 8,479,254 B2
• Filed: 08/22/2007
• Issued: 07/02/2013
• Est. Priority Date: 03/16/2007
• Status: Expired due to Fees

• Current Assignee: Apple Inc.
• Original Assignee: Apple Inc.
• Inventors: Buss, Duane F., Felsted, Patrick R., Hodgkinson, Andrew A., Sanders, Daniel S.
• Primary Examiner(s): DADA, BEEMNET W
• Application Number:
  US11/843,591
• Publication Number:
  US 20080229383A1
• Time in Patent Office: 2,141 Days
• Field of Search: 726/9, 726/20, 726/1, 726/4, 726/17, 726 27- 30
• US Class Current: 726/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

The user can associate metadata with information cards. The metadata can include, among other possibilities, string names, icons, user policies, containers, and hierarchies. The metadata is stored by the computer system. The metadata can then be used to filter the set of information cards that can satisfy a security policy from a relying party.

Claims

1. An apparatus to manage information cards, comprising:

a computer;

storage on the computer;

at least one information card stored in the storage on the computer;

metadata associated with the at least one information card that is stored in the storage on the computer, the metadata specified by a user;

a card selector operative to identify the at least one information card as satisfying a security policy; and

a filter selector to allow the user to select a user-specified filter for the at least one information card, the user-specified filter using the metadata associated with the at least one information card;

wherein the filter selector reduces the number of information cards that satisfy the security policy displayed to the user;

wherein the card selector is operative to identify the at least one information card as satisfying both the security policy and the user-specified filter;

wherein metadata associated to the information card includes metadata associating the information card with at least one of a plurality of identifiers of a plurality of containers.

2. An apparatus according to claim 1, wherein the metadata includes at least one item drawn from a set including a string name, an icon, and a user policy to the information card.

3. An apparatus according to claim 1, wherein the metadata includes at least one of a plurality of identifiers of a plurality of containers.

4. An apparatus according to claim 1, wherein the metadata includes a hierarchy of information cards.

5. An apparatus according to claim 1, wherein the card selector is operative to enable the user to select the at least one information card satisfying the security policy and the user-specified filter.

23. An apparatus according to claim 4, wherein the hierarchy of information cards is stored remote from the computer.

26. An apparatus according to claim 2, wherein the metadata does not include data that can be included as a claim in a security token.

29. An apparatus according to claim 3, wherein the plurality of container are stored on the computer.

6. A method for managing information cards, comprising:

identifying an information card;

associating metadata to the information card stored on a computer;

storing the metadata associated with the information card;

receiving a security policy from the relying party;

receiving from a user a user-specified filter using the metadata associated with the information card;

wherein the user-specified filter reduces the number of information cards displayed to the user;

selecting the information card for display to the user when the information card satisfies the security policy 4404 and the user-specified filter; and

presenting to the user the information cards that satisfy both the security policy and the user-specified filter;

wherein associating metadata to the information card includes associating the information card with at least one of a plurality of identifiers of a plurality of containers.

7. A method according to claim 6, further comprising:

receiving from the user a selected information card that satisfies both the security policy and the user-specified filter; and

using the selected information card to provide a security token to the relying party responsive to the security policy.

8. A method according to claim 6, wherein receiving from a user a user-specified filter includes presenting the user a graphic display of available user-specified filters.

9. A method according to claim 8, wherein receiving from a user a user-specified filter further includes receiving from the user an indication of one the available user-specified filters.

10. A method according to claim 6, wherein:

the method further comprises presenting to the user a list of information cards satisfying the security policy; and

receiving from a user a user-specified filter further includes updating the list of information cards presented to the user to include information cards satisfying both the security policy and the identified user-specified filter

11. A method according to claim 8, wherein presenting to the user a graphic display of available user-specified filters includes displaying an icon for the user-specified filter with the information card.

12. A method according to claim 6, wherein associating metadata to the information card includes associating at least one item from a set including a string name an icon and a user policy to the information card.

13. A method according to claim 6, wherein associating metadata to the information card includes identifying a location for the information card in a hierarchy of information cards.

24. A method according to claim 13, wherein identifying a location for the information card in a hierarchy of information cards includes identifying the location for the information card in the hierarchy of information cards, the hierarchy of information cards stored remote from the computer.

27. A method according to claim 12, wherein associating metadata to the information card includes associating metadata to the information card, where the metadata does not include data that can be included as a claim in a security token.

30. A method according to claim 6, wherein associating metadata to the information card further includes storing the information card in a container identified by the at least one of a plurality of identifiers.

14. An article, comprising a non-transitory storage medium, said non-transitory storage medium having stored thereon instructions that, when executed by a machine, result in:

identifying an information card;

associating metadata to the information card;

storing the metadata associated with the information card;

receiving a security policy from the relying party;

receiving from a user a user-specified filter using the metadata associated with the information card wherein the user-specified filter reduces the number of information cards displayed to the user;

selecting the information card for display to the user when the information card satisfies the security policy and the user-specified filter; and

presenting to the user the information cards that satisfy both the security policy and the user-specified filter;

wherein associating metadata to the information card includes associating the information card with at least one of a plurality of identifiers of a plurality of containers.

15. An article according to claim 14, wherein said non-transitory storage medium has stored thereon further instructions that, when executed by said machine, result in:

receiving from the user a selected information card that satisfies both the security policy and the user-specified filter; and

using the selected information card to provide a security token to the relying party responsive to the security policy.

16. An article according to claim 14, wherein receiving from a user a user-specified filter includes presenting to the user a graphic display of available user-specified filters.

17. An article according to claim 16, wherein receiving from a user a user-specified filter further includes receiving from the user an indication of one the available user-specified filters.

18. An article according to claim 14, wherein:

the method further comprises presenting to the user a list of information cards satisfying the security policy; and

receiving from a user a user-specified filter further includes updating the list of information cards presented to the user to include information cards satisfying both the security policy and the identified user-specified filter.

19. An article according to claim 16, wherein presenting to the user a graphic display of available user-specified filters includes displaying an icon for the user-specified filter with the information card.

20. An article according to claim 14, wherein associating metadata to the information card includes associating at least one item from a set including a string name, an icon, and a user policy to the information card.

21. An article according to claim 14, wherein associating metadata to the information card includes associating the information card with at least one of a plurality of identifiers of a plurality of containers.

22. An article according to claim 14, wherein associating metadata to the information card includes identifying a location for the information card in a hierarchy of information cards.

25. An article according to claim 22, wherein identifying a location for the information card in a hierarchy of information cards includes identifying the location for the information card in the hierarchy of information cards, the hierarchy of information cards stored remote from the computer.

28. An article according to claim 20, wherein associating metadata to the information card includes associating metadata to the information card, where the metadata does not include data that can be included as a claim in a security token.

31. An article according to claim 21, wherein associating metadata to the information card further includes storing the information card in a container identified by the at least one of a plurality of identifiers.