System and method for associating a universal user identification and a domain specific user identification

• US 9,473,501 B2
• Filed: 02/26/2016
• Issued: 10/18/2016
• Est. Priority Date: 12/08/2010
• Status: Active Grant

• Current Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Original Assignee: Disney Enterprises Incorporated (The Walt Disney Company)
• Inventors: Robert, Arnaud, Drake, Edward C.
• Primary Examiner(s): Mehrmanesh, Amir
• Application Number:
  US15/055,091
• Publication Number:
  US 20160182521A1
• Time in Patent Office: 235 Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: H04L 63/0236 Filtering by address, protocol, port number or service, e.g. IP-address or URL
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/107 wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals

Abstract

There is presented a system and method for associating a domain transcendent identification (ID) of a user and a domain specific ID of the user, the system comprising an ID association server accessible by a plurality of secure domains over a network. The system also includes an ID associator application that when executed by ID association server is configured to receive a domain specific ID that associates the user to the secure domain, enter the domain specific ID in a domain transcendent ID record created for the user, generate a unique data associated with the domain transcendent ID record and identify a network location for submission of the unique data, send the unique data and the network location to the user, and associate the domain transcendent ID and the domain specific ID.

Claims

1. A method comprising:

sending a request, by a client computer to a secure domain, for associating a domain specific ID of a user with a domain transcendent ID of the user; and

receiving, by the client computer from the secure domain and in response to the sending of the request, a network location and a unique data generated by an ID association server and associated with the domain transcendent ID, the network location identifying an authorization gateway for authenticating the unique data by a trusted third-party identity provider, and the unique data being for use by the authorization gateway to identify the domain transcendent ID of the user for associating the domain transcendent ID of the user with the domain specific ID of the user, wherein the domain transcendent ID of the user is associated with at least one or more other domain specific IDs of the user;

wherein the sending and the receiving are part of a user login process onto the secure domain.

2. The method of claim 1, wherein the domain transcendent ID is associated with other domain transcendent IDs of the user provided by other trusted third-party identify providers.

3. The method of claim 1, wherein the domain transcendent ID of the user is used for authentication across one or more other secure domains.

4. The method of claim 1, wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the secure domain.

5. The method of claim 1, wherein the domain transcendent ID and the domain specific ID are associated as part of an e-commerce transaction between the user and the secure domain.

6. The method of claim 1, wherein the domain transcendent ID and the domain specific ID are associated as a result of a response by the user to a communication initiated by the secure domain to the user.

7. The method of claim 1, wherein the domain transcendent ID and the domain specific ID are associated as a result of a response by the user to a communication provided by the secure domain to the user outside a user session of the secure domain.

8. The method of claim 1, wherein the network location comprises a Uniform Resource Locator (URL).

9. The method of claim 1, wherein the unique data is received after delivery of a good procured by the user in an e-commerce transaction with the secure domain.

10. A client computer comprising:

a hardware processor configured to;

send a request to a secure domain for associating a domain specific ID of a user with a domain transcendent ID of the user; and

receive from the secure domain, in response to the sending of the request, a network location and a unique data generated by an ID association server and associated with the domain transcendent ID, the network location identifying an authorization gateway for authenticating the unique data by a trusted third-party identity provider, and the unique data being for use by the authorization gateway to identify the domain transcendent ID of the user for associating the domain transcendent ID of the user with the domain specific ID of the user, wherein the domain transcendent ID of the user is associated with at least one or more other domain specific IDs of the user;

wherein the sending and the receiving are part of a user login process onto the secure domain.

11. The client computer of claim 10, wherein the domain transcendent ID is associated with other domain transcendent IDs of the user provided by other trusted third-party identify providers.

12. The client computer of claim 10, wherein the domain transcendent ID of the user is used for authentication across one or more other secure domains.

13. The client computer of claim 10 wherein the network location is accessible by the user for a limited time period after the unique data is sent to the user via the secure domain.

14. The client computer of claim 10, wherein the domain transcendent ID and the domain specific ID are associated as part of an e-commerce transaction between the user and the secure domain.

15. The client computer of claim 10, wherein the domain transcendent ID and the domain specific ID are associated as a result of a response by the user to a communication initiated by the secure domain to the user.

16. The client computer of claim 10, wherein the domain transcendent ID and the domain specific ID are associated as a result of a response by the user to a communication provided by the secure domain to the user outside a user session of the secure domain.

17. The client computer of claim 10, wherein the network location comprises a Uniform Resource Locator (URL).

18. The client computer of claim 10, wherein the unique data is received after delivery of a good procured by the user in an e-commerce transaction with the secure domain.