CHAINING INFORMATION CARD SELECTORS

• US 20080229411A1
• Filed: 08/22/2007
• Published: 09/18/2008
• Est. Priority Date: 03/16/2007
• Status: Active Grant

• Current Assignee: Apple Inc.
• Original Assignee: Novell Incorporated (Open Text Corporation)
• Inventors: SANDERS, Daniel S., NORMAN, James M.
• Granted Patent: US 8,087,060 B2
• Time in Patent Office: Days
• US Class Current: 726/20
• CPC Class Codes: G06F 21/41 where a single sign-on provides access to a plurality of computers
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 20/382 insuring higher security of transaction
• CPC Class Codes: G06Q 20/40 Authorisation, e.g. identification of payer or payee, verification of customer or shop credentials; Review and approval of payers, e.g. check credit lines or negative lists
• CPC Class Codes: H04L 63/0807 using tickets, e.g. Kerberos cryptographic mechanisms or cryptographic arrangements for entity authentication using tickets or tokens H04L9/3213
• CPC Class Codes: H04L 63/0815 providing single-sign-on or federations
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A machine includes card stores to store information cards. For each card store, one or more card selectors can be provided. When performing a transaction involving information cards, a generic card selector, using a selector policy engine, can identify a card selector to use for the transaction. The identified card selector can be used to identify an information card in a card store to use in performing the transaction, which can be used to provide a security token to the relying party.

Claims

1. An apparatus, comprising:

a computer (105);

a plurality of card selectors (310, 320, 330), each card selector (310, 320, 330) associated with at least one card store (315, 325, 335);

a generic card selector (205) to receive a security policy (150);

a selector policy engine (305) to identify one of the plurality of card selectors (310, 320, 330); and

means for using one of the information cards (215) in a card store (315, 325, 335) associated with said identified card selector (310, 320, 330) to respond to the security policy (150).

2. An apparatus according to claim 1, wherein the selector policy engine (305) is operative to present to a user the list (510) of plurality of card selectors (310, 320, 330) and receive from the user an identification of said identified card selector (310, 320, 330).

3. An apparatus according to claim 1, wherein the selector policy engine (305) is operative to identify said one of the plurality of card selectors (310, 320, 330) based on at least one of a set including the security policy (150), a user name (405), a user data (410), a user preference (415) for the card store (315, 325, 335), and a policy (420, 425, 430).

4. An apparatus according to claim 3, wherein the policy (420, 425, 430) is any of a time-based policy (420), a location-based policy (425), or an adaptive policy (430).

5. An apparatus according to claim 1, wherein each card store (315, 325, 335) is compatible with only its associated card selector (310, 320, 330).

6. An apparatus according to claim 1, wherein the generic card selector (205) includes a plug-in receiver to add the identified card selector (310, 320, 330) to the plurality of card selectors (310, 320, 330).

7. A method for performing a transaction using a generic card selector (205), comprising:

receiving (615) a security policy (150) from a relying party;

identifying (620) a card selector (310, 320, 330) from a plurality of card selectors (310, 320, 330), each card selector (310, 320, 330) associated with at least one card store (315, 325, 335);

using (625) the identified card selector (310, 320, 330) to identify an information card (215) in the associated card store (315, 325, 335); and

using (630) the information card (215) to satisfy the security policy (150).

8. A method according to claim 7, wherein identifying (620) a card selector (310, 320, 330) includes receiving (715) from a user a selection of the card selector (310, 320, 330) from the plurality of card selectors (310, 320, 330).

9. A method according to claim 8, wherein receiving (715) from a user a selection of the card selector (310, 320, 330) includes presenting (710) to the user a list (510) of the plurality of card selectors (310, 320, 330).

10. A method according to claim 7, wherein identifying a card selector (310, 320, 330) includes automatically selecting (705) a card selector (310, 320, 330) based on at least one of a set including the security policy (150), a user name (405), a user data (410), a user preference (415) for the card store (315, 325, 335), and a policy (420, 425, 430).

11. A method according to claim 7, wherein automatically selecting (705) a card selector (310, 320, 330) includes automatically selecting (705) a card selector (310, 320, 330) based on any of a time-based policy (420), a location-based policy (425), or an adaptive policy (430).

12. A method according to claim 7, wherein identifying (620) a card selector (310, 320, 330) from a plurality of card selectors (310, 320, 330) includes identifying (620) the card selector (310, 320, 330) from the plurality of card selectors (310, 320, 330), each card selector (310, 320, 330) associated with at least one card store (315, 325, 335), and each card store (315, 325, 335) compatible only with the associated card selector (310, 320, 330).

13. A method according to claim 7, further comprising receiving (605) the card selector (310, 320, 330) as a plug-in to the generic card selector (205).

14. An article, comprising a storage medium, said storage medium having stored thereon instructions that, when executed by a machine, result in:

receiving (615) a security policy (150) from a relying party;

identifying (620) a card selector (310, 320, 330) from a plurality of card selectors (310, 320, 330), each card selector (310, 320, 330) associated with at least one card store (315, 325, 335);

using (625) the identified card selector (310, 320, 330) to identify an information card (215) in the associated card store (315, 325, 335); and

using (630) the information card (215) to satisfy the security policy (150).

15. An article according to claim 14, wherein identifying (620) a card selector (310, 320, 330) includes receiving (715) from a user a selection of the card selector (310, 320, 330) from the plurality of card selectors (310, 320, 330).

16. An article according to claim 15, wherein receiving (715) from a user a selection of the card selector (310, 320, 330) includes presenting (710) to the user a list (510) of the plurality of card selectors (310, 320, 330).

17. An article according to claim 14, wherein identifying a card selector (310, 320, 330) includes automatically selecting (705) a card selector (310, 320, 330) based on at least one of a set including the security policy (150), a user name (405), a user data (410), a user preference (415) for the card store (315, 325, 335), and a policy (420, 425, 430).

18. An article according to claim 14, wherein automatically selecting (705) a card selector (310, 320, 330) includes automatically selecting (705) a card selector (310, 320, 330) based on any of a time-based policy (420), a location-based policy (425), or an adaptive policy (430).

19. An article according to claim 14, wherein identifying (620) a card selector (310, 320, 330) from a plurality of card selectors (310, 320, 330) includes identifying (620) the card selector (310, 320, 330) from the plurality of card selectors (310, 320, 330), each card selector (310, 320, 330) associated with at least one card store (315, 325, 335), and each card store (315, 325, 335) compatible only with the associated card selector (310, 320, 330).

20. An article according to claim 14, wherein said storage medium has stored thereon further instructions that, when executed by said machine, result in receiving (605) the card selector (310, 320, 330) as a plug-in to the generic card selector (205).