Metadata broker

• US 7,908,292 B2
• Filed: 12/05/2006
• Issued: 03/15/2011
• Est. Priority Date: 12/05/2006
• Status: Active Grant

• Current Assignee: Nokia Technologies Oy (Nokia Corporation)
• Original Assignee: Nokia Corporation
• Inventors: Tervo, Timo P., Koistinen, Kirmo, Kaarela, Kari
• Primary Examiner(s): Robinson; Greta L
• Application Number:
  US11/567,065
• Publication Number:
  US 20080133539A1
• Time in Patent Office: 1,561 Days
• Field of Search: 707/9, 707/10, 707/200, 707/100, 707/102, 707/687, 707/694, 707/705, 707/736, 707/747, 707/781, 707/783, 707/764, 707/790, 455/411, 455/412.1, 455/410, 705/1, 705/64, 705/67, 705/44, 705/72, 705 51- 56, 705 75- 79, 380/270
• US Class Current: 707/783
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/562 Brokering proxy services

Abstract

The present invention provides methods and apparatuses for obtaining selected metadata from a user device. The user device has a metadata engine that stores and accesses metadata in response to a metadata query. A metadata broker verifies the authenticity of the metadata query from a service provider and returns selected metadata if the service provider has rights to obtain the metadata. The user device has a communications interface that sends a service request that is indicative of the selected service over a communications channel and receives the metadata request that is indicative of the selected metadata. An authorization center receives a metadata request from a service provider, accesses a rule set to determine selected metadata in accordance with predetermined rights, and returns a signed metadata request to the service provider. The signed metadata request has an electronic signature of an authorizing party and is indicative of the selected metadata.

Claims

1. A method comprising:

sending, by a mobile terminal, a service request to a service provider for a selected service;

receiving in response to the service request, at the mobile terminal, a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the mobile terminal, the signed metadata request requesting selected metadata collected by and stored in the mobile terminal and related to tasks or actions that are performed at the mobile terminal and enabled by the selected service;

verifying, by a metadata broker in the mobile terminal, the electronic signature in the signed metadata request; and

transmitting directly to the service provider, by the metadata broker, the selected metadata.

2. A method of claim 1, further comprising:

using a public key certificate to verify the signed metadata request.

3. A method of claim 1, further comprising:

filtering the selected metadata to remove private metadata.

4. A method of claim 1, further comprising:

providing user information in the service request, the user information including a device type or a user identification.

5. A method of claim 1, wherein the tasks or actions include at least one of surfing the Internet, making payments, downloading media and applications, and accessing content for entertainment.

6. A method of claim 1, wherein the metadata is related to objects or files that are handled by the mobile terminal for providing user services, and the objects or files include at least one of contacts, calls, and messages of the user.

7. A computer-readable storage medium storing one or more sequences of one or more instructions which, when executed by one or more processors, cause a mobile terminal to at least perform the following steps:

sending a service request to a service provider for a selected service;

in response to the service request, receiving a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the mobile terminal, the signed metadata request requesting selected metadata collected by and stored in the mobile terminal and related to tasks or actions that are performed at the mobile terminal and enabled by the selected service;

verifying, by a metadata broker in the mobile terminal, the electronic signature in the signed metadata request; and

transmitting directly to the service provider, by the metadata broker, the selected metadata.

8. A computer-readable storage medium of claim 7, wherein the mobile terminal is caused to further perform:

using a public key certificate to verify the metadata request.

9. A computer-readable storage medium of claim 7, wherein the mobile terminal is caused to further perform:

filtering the selected metadata to remove private metadata.

10. A computer-readable storage medium of claim 7, wherein the mobile terminal is caused to further perform:

providing user information in a service request, the user information including a device type or a user identification.

11. A computer-readable storage medium of claim 7, wherein the tasks or actions include at least one of surfing the Internet, making payments, downloading media and applications, and accessing content for entertainment.

12. A computer-readable storage medium of claim 7, wherein the metadata is related to objects or files that are handled by the mobile terminal for providing user services, and the objects or files include at least one of contacts, calls, and messages of the user.

13. A mobile terminal comprising:

at least one processor; and

at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the mobile terminal to perform at least the following,

send a service request to a service provider for a selected service;

in response to the service request, receive a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the mobile terminal, the signed metadata request requesting selected metadata collected by and stored in the mobile terminal and related to tasks or actions that are performed at the mobile terminal and enabled by the selected service;

verify, by a metadata broker in the mobile terminal, the electronic signature in the signed metadata request; and

transmit directly to the service provider, by the metadata broker, the selected metadata.

14. A mobile terminal of claim 13, wherein the mobile terminal is further caused to:

use a public key certificate to verify the signed metadata request.

15. A mobile terminal of claim 13, wherein the mobile terminal is further caused to:

filter the selected metadata to remove private metadata.

16. A mobile terminal of claim 13, wherein the mobile terminal is further caused to:

provide user information in the service request, the user information including a device type or a user identification.

17. A mobile terminal of claim 13, wherein the selected metadata is dependent on the selected service.

18. A mobile terminal of claim 13, wherein the selected metadata is returned only when the electronic signature is verified.

19. A mobile terminal of claim 13, wherein the tasks or actions include at least one of surfing the Internet, making payments, downloading media and applications, and accessing content for entertainment.

20. A mobile terminal of claim 13, wherein the metadata is related to objects or files that are handled by the mobile terminal for providing user services, and the objects or files include at least one of contacts, calls, and messages of the user.

21. A method comprising:

causing, at least in part, transmission of a service request from a mobile terminal to a service provider for a selected service;

in response to the service request, causing, at least in part, reception at the mobile terminal a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the mobile terminal, the signed metadata request requesting selected metadata collected by and stored in the mobile terminal and related to tasks or actions that are performed at the mobile terminal and enabled by the selected service;

causing, at least in part, verification by a metadata broker in the mobile terminal the electronic signature in the signed metadata request; and

causing, at least in part, transmission of the selected metadata directly from the metadata broker to the service provider.

22. A method of claim 21, further comprising:

using a public key certificate to verify the signed metadata request.

23. A method of claim 21, further comprising:

filtering the selected metadata to remove private metadata.

24. A method of claim 21, further comprising:

providing user information in the service request, the user information including a device type or a user identification.

25. A computer-readable storage medium storing one or more sequences of one or more instructions which cause an apparatus within a mobile terminal to at least perform the following steps:

causing, at least in part, transmission of a service request to a service provider for a selected service;

in response to the service request, causing, at least in part, reception a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the apparatus, the signed metadata request requesting selected metadata collected by and stored in the apparatus and related to tasks or actions that are performed at the apparatus and enabled by the selected service;

causing, at least in part, verification by a metadata broker in the apparatus the electronic signature in the signed metadata request; and

causing, at least in part, transmission of the selected metadata directly from the metadata broker to the service provider.

26. A computer-readable storage medium of claim 25, wherein the apparatus is caused to further perform:

using a public key certificate to verify the metadata request.

27. A computer-readable storage medium of claim 25, wherein the apparatus is caused to further perform:

filtering the selected metadata to remove private metadata.

28. A computer-readable storage medium of claim 25, wherein the apparatus is caused to further perform:

providing user information in a service request, the user information including a device type or a user identification.

29. An apparatus comprising:

at least one memory including computer program code, the at least one memory and the computer program code configured to cause the apparatus within a mobile terminal to perform at least the following,

cause, at least in part, transmission of a service request to a service provider for a selected service;

in response to the service request, cause, at least in part, reception a signed metadata request having an electronic signature of an authorizing party that authenticates the service provider, the authorizing party being independent from the service provider and the apparatus, the signed metadata request requesting selected metadata collected by and stored in the apparatus and related to tasks or actions that are performed at the apparatus and enabled by the selected service;

cause, at least in part, verification by a metadata broker in the apparatus the electronic signature in the signed metadata request; and

cause, at least in part, transmission of the selected metadata directly from the metadata broker to the service provider.

30. An apparatus of claim 29, wherein the apparatus is further caused to:

use a public key certificate to verify the signed metadata request.

31. An apparatus of claim 29, wherein the apparatus is further caused to:

filter the selected metadata to remove private metadata.

32. An apparatus of claim 29, wherein the apparatus is further caused to:

provide user information in the service request, the user information including a device type or a user identification.

33. An apparatus of claim 29, wherein the selected metadata is dependent on the selected service.

34. An apparatus of claim 29, wherein the selected metadata is returned only when the electronic signature is verified.