Metadata broker

• US 8,775,469 B2
• Filed: 02/04/2011
• Issued: 07/08/2014
• Est. Priority Date: 12/05/2006
• Status: Active Grant

• Current Assignee: Nokia Corporation
• Original Assignee: Nokia Corporation
• Inventors: Kaarela, Kari, Koistinen, Kirmo, Tervo, Timo P.
• Primary Examiner(s): ROBINSON, GRETA LEE
• Application Number:
  US13/021,325
• Publication Number:
  US 20110138478A1
• Time in Patent Office: 1,250 Days
• Field of Search: 707/687, 707/707, 707/783, 707/770, 707/999.01, 705/64, 705/67, 705/72, 705/75, 705/76, 705/1.1, 705/71, 455/411, 455/410, 726/2, 726/4, 726/5, 726/9, 726/10, 726/14, 726/15, 726/17, 726/26, 726/27, 726/28, 726/29
• US Class Current: 707/783
• CPC Class Codes: G06F 21/10 Protecting distributed programs or content, e.g. vending or licensing of copyrighted material protection in video systems or pay television H04N7/16 ; Digital rights management [DRM]
• CPC Class Codes: G06F 21/31 User authentication
• CPC Class Codes: G06F 21/6227 where protection concerns the structure of data, e.g. records, types, queries
• CPC Class Codes: G06Q 20/3821 Electronic credentials
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32
• CPC Class Codes: H04L 67/56 Provisioning of proxy services store-and-forward switching systems in data switching networks H04L12/54
• CPC Class Codes: H04L 67/562 Brokering proxy services

Abstract

The present invention provides methods and apparatuses for obtaining selected metadata from a user device. The user device has a metadata engine that stores and accesses metadata in response to a metadata query. A metadata broker verifies the authenticity of the metadata query from a service provider and returns selected metadata if the service provider has rights to obtain the metadata. The user device has a communications interface that sends a service request that is indicative of the selected service over a communications channel and receives the metadata request that is indicative of the selected metadata. An authorization center receives a metadata request from a service provider, accesses a rule set to determine selected metadata in accordance with predetermined rights, and returns a signed metadata request to the service provider. The signed metadata request has an electronic signature of an authorizing party and is indicative of the selected metadata.

Claims

1. A method comprising:

receiving, by a processor controlled by a service provider, a service request from a user terminal for a service;

generating, by the processor, a metadata request for requesting access to metadata stored in the user terminal, wherein the metadata enables the service to be rendered to the user terminal;

determining, by the processor, to transmit the metadata request to be signed by an authorizing party with an electronic signature based upon a right of the service provider to access the metadata;

receiving, by the processor, the signed metadata request;

determining, by the processor, to transmit the signed metadata request to the user terminal to request access by the service provider to the metadata stored at the user terminal; and

receiving, by the processor, the metadata directly from the user terminal upon verification of the signed metadata request by the user terminal.

2. A method of claim 1, further comprising:

extracting user information from the service request; and

determining to render the service to the user terminal,

wherein the metadata request is generated based further at least in part on the user information.

3. A method of claim 2, wherein the user information is contained in a cookie.

4. A method of claim 1, further comprising:

extracting user information from the service request; and

determining to render the service to the user terminal based on whether the user information is consistent with a user profile.

5. A method of claim 1, wherein the electronic signature in the signed metadata request is verified by the user terminal with a key of the user terminal.

6. A method of claim 1, wherein the metadata includes a device type, a user identification, or a combination thereof, and the user terminal is a mobile device.

7. A method of claim 6, wherein the metadata received by the service provider from the user terminal was filtered to remove private metadata before the service is rendered, and the user terminal is a mobile phone.

8. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus that is controlled by a service provider to perform at least the following,

receive a service request from a user terminal for a service,

generate a metadata request for requesting access to metadata stored in the user terminal, wherein the metadata enables the service to be rendered to the user terminal,

determine to transmit the metadata request to be signed by an authorizing party with an electronic signature based upon a right of the service provider to access the metadata,

receive the signed metadata request,

determine to transmit the signed metadata request to the user terminal to request access by the service provider to the metadata stored at the user terminal, and

receive the metadata directly from the user terminal upon verification of the signed metadata request by the user terminal.

9. An apparatus of claim 8, wherein the apparatus is further caused to:

extract user information from the service request; and

determine to render the service to the user terminal,

wherein the metadata request is generated based further at least in part on the user information.

10. An apparatus of claim 9, wherein the user information is contained in a cookie.

11. An apparatus of claim 8, wherein the apparatus is further caused to:

extract user information from the service request; and

determine to render the service to the user terminal based on whether the user information is consistent with a user profile.

12. A method comprising:

receiving, by a processor controlled by an authorizing party, a metadata request from a service provider requesting access to metadata stored in a user terminal, wherein the metadata enables a service to be rendered by the service provider to the user terminal;

determining, by the processor, a right of the service provider to access the metadata;

determining, by the processor, to sign the metadata request with an electronic signature of the authorizing party based upon the determined right; and

determining, by the processor, to transmit the signed metadata request via the service provider to the user terminal to be verified by the user terminal,

wherein the metadata is transmitted directly from the user terminal to the service provider upon verification of the signed metadata request by the user terminal.

13. A method of claim 12, wherein the service provider is prevented from modifying the signed metadata request.

14. A method of claim 12, further comprising:

generating one or more rules to specify the right, the one or more rules being specific to the service provider among a plurality of service providers.

15. A method of claim 14, further comprising:

editing the rules based upon communication with the service providers.

16. A method of claim 12, wherein the authorizing party is independent from the service provider and the user terminal.

17. An apparatus comprising:

at least one processor; and

at least one memory including computer program code for one or more programs,

the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus that is controlled by an authorizing party to perform at least the following,

receive a metadata request from a service provider requesting access to metadata stored in a user terminal, wherein the metadata enables a service to be rendered by the service provider to the user terminal,

determine a right of the service provider to access the metadata,

determine to sign the metadata request with an electronic signature of the authorizing party based upon the determined right, and

determine to transmit the signed metadata request via the service provider-to the user terminal to be verified by the user terminal,

wherein the metadata is transmitted directly from the user terminal to the service provider upon verification of the signed metadata request by the user terminal.

18. An apparatus of claim 17, wherein the service provider is prevented from modifying the signed metadata request.

19. An apparatus of claim 17, wherein the apparatus is further caused to:

generate one or more rules to specify the right, the one or more rules being specific to the service provider among a plurality of service providers.

20. An apparatus of claim 19, wherein the apparatus is further caused to:

configure the one or more rules based on input from the service provider.