APPARATUS AND METHOD FOR MANAGING IDENTITY INFORMATION
    31.
    发明申请
    APPARATUS AND METHOD FOR MANAGING IDENTITY INFORMATION 有权
    用于管理身份信息的装置和方法

    公开(公告)号:US20100146586A1

    公开(公告)日:2010-06-10

    申请号:US12612451

    申请日:2009-11-04

    IPC分类号: H04L9/00

    摘要: Provided are an apparatus and method for managing identity information. The apparatus includes a contract detail manager managing details of an identity information sharing contract made between a user and an identity provider (IdP) wanting to provide identity information about the user, and details of an identity information sharing contract made between the user and an identity consumer (IdC) wanting to be provided with the identity information about the user, an IdP selector selecting an IdP capable of providing the identity information about the user based on the details of the sharing contract when a request for the identity information about the user is input from the IdC, and an information provider obtaining information according to the identity information request from the selected IdP, and providing the obtained information to the IdC. The apparatus and method can solve a problem that all of a user's identity information is provided to an IdC according to the user's comprehensive agreement.

    摘要翻译: 提供了一种用于管理身份信息的装置和方法。 该装置包括管理用户与想要提供关于用户的身份信息的身份提供者(IdP)之间进行的身份信息共享合同的细节的合同细节管理者以及在用户和身份之间进行的身份信息共享合同的细节 消费者(IdC)希望被提供有关用户的身份信息,当对请求关于用户的身份信息的请求时,IdP选择器选择能够基于共享契约的细节提供关于用户的身份信息的IdP 来自IdC的输入,以及信息提供者根据来自所选择的IdP的身份信息请求获得信息,并将所获得的信息提供给IdC。 该装置和方法可以解决根据用户的全面协议将用户的身份信息全部提供给IdC的问题。

    SYSTEM AND METHOD FOR UPDATING USER IDENTIFIERS (IDs)
    32.
    发明申请
    SYSTEM AND METHOD FOR UPDATING USER IDENTIFIERS (IDs) 有权
    用于更新用户标识符(ID)的系统和方法

    公开(公告)号:US20090235326A1

    公开(公告)日:2009-09-17

    申请号:US11720775

    申请日:2006-06-15

    IPC分类号: H04L9/32

    摘要: Provided are a system and method for updating a user identifier (ID). The user ID updating method includes: (a) collecting unauthorized access attempt information for a user ID; (b) creating a user ID update policy for an encoded user ID obtained by encoding the user ID, according to the unauthorized access attempt information collected in operation (a); (c) storing the user ID update policy created in operation (b); (d) loading the user ID update policy stored in operation (c) and determining whether or not to update the user ID; and (e) creating a new user ID if it is determined in operation (d) that the user ID should be updated, and changing the user ID to the new user ID. Therefore, it is possible to ensure security for user IDs, by dynamically creating and updating user IDs according to security environments.

    摘要翻译: 提供了一种用于更新用户标识符(ID)的系统和方法。 用户ID更新方法包括:(a)收集用户ID的未经授权的访问尝试信息; (b)根据在操作(a)中收集的未经授权的访问尝试信息,创建通过对用户ID进行编码而获得的编码用户ID的用户ID更新策略; (c)存储在操作(b)中创建的用户ID更新策略; (d)加载存储在操作(c)中的用户ID更新策略,并确定是否更新用户ID; 以及(e)如果在操作(d)中确定应该更新用户ID并且将用户ID改变为新的用户ID,则创建新的用户ID。 因此,可以通过根据安全环境动态创建和更新用户ID来确保用户ID的安全性。

    METHOD AND SYSTEM FOR MANAGING RELIABILITY OF IDENTIFICATION MANAGEMENT APPARATUS FOR USER CENTRIC IDENTITY MANAGEMENT
    34.
    发明申请
    METHOD AND SYSTEM FOR MANAGING RELIABILITY OF IDENTIFICATION MANAGEMENT APPARATUS FOR USER CENTRIC IDENTITY MANAGEMENT 审中-公开
    管理用户中心身份管理识别管理装置可靠性的方法与系统

    公开(公告)号:US20080133296A1

    公开(公告)日:2008-06-05

    申请号:US11931988

    申请日:2007-10-31

    IPC分类号: G06Q10/00 G06F17/40

    摘要: Provided are a method and system for managing reliability of an identification (ID) management apparatus for user centric ID management.Provided are a method and system for managing reliability of an ID management apparatus, whereby an application service providing apparatus can determine whether to trust a corresponding ID management apparatus without having a pre-agreement with an ID management apparatus regardless of which ID management apparatus is selected by a user in user centric ID management circumstances.Therefore, reliability is determined according to types of information provided by the ID management apparatus, and reliability of the ID management apparatus can be determined according to a result of evaluation made by the application service providing apparatus instead of a particular single subject.

    摘要翻译: 提供了一种用于管理以用户为中心的ID管理的识别(ID)管理装置的可靠性的方法和系统。 提供一种用于管理ID管理装置的可靠性的方法和系统,由此应用服务提供装置可以确定是否信任相应的ID管理装置,而不需要与ID管理装置的预先协商,而不管选择了哪个ID管理装置 由用户以用户为中心的ID管理情况。 因此,根据由ID管理装置提供的信息的类型确定可靠性,并且可以根据由应用服务提供装置代替特定单个对象的评估结果来确定ID管理装置的可靠性。

    SERVER AND SYSTEM FOR TRANSMITTING CERTIFICATE STORED IN FIXED TERMINAL TO MOBILE TERMINATED AND METHOD USING THE SAME
    35.
    发明申请
    SERVER AND SYSTEM FOR TRANSMITTING CERTIFICATE STORED IN FIXED TERMINAL TO MOBILE TERMINATED AND METHOD USING THE SAME 失效
    用于将固定终端中存储的证书发送到移动终端的服务器和系统以及使用该终端的方法

    公开(公告)号:US20080126797A1

    公开(公告)日:2008-05-29

    申请号:US11934620

    申请日:2007-11-02

    IPC分类号: H04L9/00

    CPC分类号: H04L9/3263 H04L2209/80

    摘要: Provided is a certificate transmission server transmitting a certificate stored in a fixed terminal to a mobile terminal, a system including the same, and a method using the same. The method includes forming a security channel to the mobile terminal and performing authentication of the mobile terminal, forming a security channel to the fixed terminal and performing authentication of the fixed terminal, and if the authentication of the mobile terminal and the fixed terminal is successful, receiving the certificate from the fixed terminal and transmitting the certificate to the mobile terminal. Accordingly, authentication of a mobile terminal and a fixed terminal can be performed by a certificate transmission server, and the certificate can be transmitted by establishing a safe communication channel.

    摘要翻译: 提供了将存储在固定终端中的证书发送到移动终端的证书传输服务器,包括其的系统以及使用该证书的方法。 该方法包括:向移动终端形成安全信道,执行移动终端的认证,形成到固定终端的安全信道,并进行固定终端的认证;如果移动终端和固定终端的认证成功, 从固定终端接收证书,并将证书发送到移动终端。 因此,可以由证书发送服务器执行移动终端和固定终端的认证,并且可以通过建立安全通信信道来发送证书。