Virtual identity apparatus and method for using same

• US 20030172090A1
• Filed: 01/10/2003
• Published: 09/11/2003
• Est. Priority Date: 01/11/2002
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Skytta, Timo, Asunmaa, Petri, Aarts, Robert, Reichler, Thomas
• Granted Patent: US 7,996,888 B2
• Time in Patent Office: Days
• US Class Current: 707/200
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/0272 Virtual private networks
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00
• CPC Class Codes: H04L 63/06 for supporting key management in a packet data network cryptographic mechanisms or cryptographic arrangements for key management H04L9/08
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/0838 using one-time-passwords
• CPC Class Codes: H04L 63/0853 using an additional device, e.g. smartcard, SIM or a different communication terminal cryptographic mechanisms or cryptographic arrangements for entity authentication involving additional secure or trusted devices H04L9/3234
• CPC Class Codes: H04L 63/0869 for achieving mutual authentication cryptographic mechanisms or cryptographic arrangements for mutual authentication H04L9/3273
• CPC Class Codes: H04L 63/162 at the data link layer
• CPC Class Codes: H04L 63/166 at the transport layer

Abstract

A system according to an embodiment of the invention provides a means whereby a user or user device may be authenticated by an identity provider. The authentication may provide a trust relationship between the user and a service provider. An IdentityCard, a virtual version of traditional ID cards seamlessly expands the end user'"'"'s ID card experience and related services to a personal device, like a mobile station or a Personal Digital Assistant (PDA), as well as to the Web browser.

Claims

1. An identity client comprising:

a plurality of identities with associated functionality, wherein at least two of the identities have different nymity levels; and

a means for selecting an identity based on the required nymity level; and

a processor to access and operate on functionality associated with the identity.

2. The identity client of claim 1, wherein the identities are in the form of physical identification modules, further comprising:

a display for displaying information regarding the modules;

a keyboard for data entry; and

a local processor to process functionality associated with the identity with may require local processing.

3. The identity clients of claim 1 or 2, further comprising:

a memory to maintain history information about the usage of the identity.

4. The method of claim 3, wherein logging on to the service comprises:

completing an application form;

being granted an identity;

logging on to the system; and

associating the granted identity with other identities of the user.

5. The method of claim 3, wherein list of identity cards is a list of identity providers.

6. The method of claim 3, further comprising:

automatically presenting a second identity which has been associated with the first identity.

3-1. A method for using identities by a user comprising:

connecting to a service;

receiving from the service a list of accepted identities;

selecting an identity among the list of accepted identities;

logging on to the service with the selected identity; and

accessing functionality associated with the selected identity.