Preference editor to facilitate privacy controls over user identities

• US 9,130,915 B2
• Filed: 05/27/2009
• Issued: 09/08/2015
• Est. Priority Date: 05/27/2008
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: Open Invention Network LLC
• Inventors: Ahn, Gail-Joon
• Primary Examiner(s): Lagor, Alexander
• Application Number:
  US12/472,494
• Publication Number:
  US 20090300512A1
• Time in Patent Office: 2,295 Days
• Field of Search: 726/26
• US Class Current: 1/1
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/083 using passwords cryptographic mechanisms or cryptographic arrangements for entity authentication using a predetermined code H04L9/3226
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/102 Entity profiles
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227
• CPC Class Codes: H04L 67/01 Protocols

Abstract

A privacy preference editor enables a user to institute privacy preferences relative to user identity information on a card-based and category-based basis. An identity selector furnishes information cards representative of user identities. The editor allows the user to set a privacy preference for each information card. Any proposed disclosure of an information card invokes its corresponding privacy preference. In turn, an agent engine evaluates the invoked privacy preference against the privacy policy of a relying party seeking the card information. The editor also permits the user to create information categories, populate the categories with a group of relevant user identity attributes, and set a privacy preference to the category. In this way, a category-specific privacy preference can be invoked by using the attribute required by the security policy as an index to the appropriate categorized group where the required attribute resides.

Claims

1. A system, comprising:

a memory;

a processing device, coupled with the memory to execute;

an identity selector configured to provide a selection of at least one user identity from a plurality of user identities for a single user, each user identity having a respective plurality of user identity attributes; and

a privacy preference editor;

the privacy preference editor configured to receive at least one input indicative of a user selection that specifies a privacy preference feature relative to one or more of the selected user identities, and to generate at least one privacy preference relative to the one or more of the selected user identities using the at least one input, wherein the privacy preference indicates how the privacy of at least one user attribute of the one or more selected user identities is treated when the at least one user attribute is provided to a third party;

wherein the privacy preference editor is configured to associate the at least one privacy preference to at least one information card each defining a collection of attributes;

wherein the at least one information card is related to the one or more of the selected user identities; and

wherein the identity selector retrieves and determines which of the at least one information card satisfy identity requirements of a security policy, enables the user to select one of the at least one information card determined to satisfy the security policy, and requests an issuance of a security token from an identity provider, in reference to the at least one information card selected by the user.

2. The system of claim 1, wherein the privacy preference editor is configured to selectively associate the at least one privacy preference to at least one of:

at least one categorized group of user identity attributes, and a respective user identity attribute in a one-to-one correspondence.

3. The system of claim 1, wherein the privacy preference editor further includes:

a process having a first operating mode and a second operating mode;

the first mode being configured to provide a respective privacy preference for each user identity; and

the second operating mode being configured to associate at least one user identity attribute with the respective privacy preference.

4. The system of claim 3, wherein the second operating mode configured further to:

(1) provide at least one category, (2) populate each category with at least one user identity attribute to form a respective category-specific group, and (3) associate each category with a respective privacy preference.

5. The system of claim 3, further comprises:

an interface for enabling a user to interact with the privacy preference editor to direct the first operating mode and the second operating mode.

6. The system of claim 5, wherein the interface is configured for enabling the user, in respect of the first operating mode, to selectively assign a privacy preference to each user identity;

and for enabling the user, in respect of the second operating mode, to selectively conduct operations to determine at least one category, assign at least one attribute to each category, and establish a privacy preference for each category.

7. The system of claim 1, wherein the identity selector is operative for providing a plurality of information cards;

the privacy preference editor is configured for selectively associating at least one information card with a respective privacy preference; and

the privacy preference editor is configured for selectively determining at least one categorized group of attributes, and for selectively determining a privacy preference for each category.

8. A method, comprising:

providing, by an identity selector, at least one indication of at least one user identity of a plurality of user identities for a single user, each user identity having a respective plurality of user identity attributes;

determining at least one privacy preference feature relative to one of the user identity indications; and

generating at least one privacy preference, by a privacy preference editor, relative to the at least one indication of at least one user identity, using the determination, wherein the privacy preference indicates how the privacy of at least one user attribute of the one or more selected user identities is treated when the at least one user attribute is provided to a third party;

wherein the privacy preference editor is configured to associate the at least one privacy preference to at least one information card each defining a collection of attributes;

wherein the at least one information card is related to the one or more of the selected user identities; and

wherein the identity selector retrieves and determines which of the at least one information card satisfy identity requirements of a security policy, enables the user to select one of the at least one information card determined to satisfy the security policy, and requests an issuance of a security token from an identity provider, in reference to the at least one information card selected by the user.

9. The method of claim 8, wherein the generating further includes:

defining at least one category;

populating each category with at least one user identity attribute to form a respective group; and

associating each category with a respective privacy preference.

10. The method of claim 8, wherein the generating further includes:

providing at least one category;

a user selectively mapping at least one user identity attribute to a relevant category; and

the user selectively assigning a privacy preference to each category.

11. The method of claim 8, further comprises:

the providing further includes providing a plurality of information cards; and

associating each information card with a privacy preference.

12. The method of claim 8, wherein the generating further includes:

selectively associating the at least one privacy preference to at least one of;

at least one categorized group of user identity attributes, and a respective user identity attribute in a one-to-one correspondence.

13. A non-transitory computer-readable medium having computer-executable instructions for execution by at least one processor, that, when executed, cause the at least one processor to:

receive at least one input indicative of a privacy preference specification relative to an indication of at least one user identity of a plurality of user identities for a single user, each user identity having a respective plurality of user identity attributes; and

generate at least one privacy preference relative to the at least one indication of at least one user identity, using the at least one input, wherein the privacy preference indicates how the privacy of at least one user attribute of the one or more selected user identities is treated when the at least one user attribute is provided to a third party;

associate the at least one privacy preference to at least one information card each defining a collection of attributes;

wherein the at least one information card is related to the one or more of the selected user identities; and

retrieve and determine which of the at least one information card satisfy identity requirements of a security policy, enables the user to select one of the at least one information card determined to satisfy the security policy, and requests an issuance of a security token in reference to the at least one information card selected by the user.

14. The non-transitory computer-readable medium of claim 13, wherein the instructions further cause the processor to:

define at least one category;

populate each category with at least one user identity attribute to form a respective group; and

associate each category with a respective privacy preference.

15. The non-transitory computer-readable medium of claim 13, wherein the instructions further cause the processor to:

provide at least one category;

enable a user to selectively map at least one user identity attribute to a relevant category; and

enable the user to selectively assign a privacy preference to each category.

16. The non-transitory computer-readable medium of claim 13, wherein the instructions further cause the processor to:

receive an indication of at least one information card; and

associate each information card indication with a privacy preference.

17. The non-transitory computer-readable medium of claim 13, wherein the instructions further cause the processor to:

selectively associate the at least one privacy preference to at least one of;

(at least one categorized group of user identity attributes, and a respective user identity attribute in a one-to-one correspondence.