US 10,873,853 B2 · Systems and methods for managing digital identities associated with users

Abstract

Systems and methods are provided for managing digital identities in multiple regions, through multiple identity providers, while providing for policy enforcement in connection with the digital identities. One exemplary method includes receiving, at an identity and access management hub (IAMH) in a first region, a request related to a digital identity from a secondary hub disposed in a second region and checking a policy associated with the digital identity. In response, the IAMH solicits at least one claim from a user, at a relying party application and/or website, based on the request and provides the at least one claim to a value-added service associated with the IAMH for verification of the at least one claim. The IAMH then transmits a result of the verification to the relying party associated with the request and provides a token, in response to the request, to a secure resource associated with the relying party.

Claims16

Dependent claims

A computer-implemented method for use in managing digital identities in multiple different countries, through multiple identity providers, while providing for policy enforcement of the different countries in connection with the digital identities, the method comprising:

receiving, at an identity and access management hub (IAMH) computing device in a first country, a request related to a digital identity from a secondary hub disposed in a second country, the second country different than the first country;
checking, by the IAMH computing device, a policy associated with the digital identity and specific to the second country;
soliciting, by the IAMH computing device, at least one claim from a user, at a relying party application and/or a relying party website, based on the request;
providing the at least one claim to a value-added service associated with the IAMH computing device for verification of the at least one claim;
transmitting, by the IAMH computing device, a result of the verification to a relying party associated with the request;
and
providing, by the IAMH computing device, a token, in response to the request, to a secure resource associated with the relying party.

4 more elements

A system for use in managing digital identities in multiple countries, through multiple identity providers, while providing for policy enforcement in connection with the digital identities, the system comprising:

an identity and access management hub (IAMH) computing device disposed within a first country;
and
at least one secondary hub computing device coupled in communication with the IAMH computing device and in communication with an identity provider (IDP) computing device including a digital identity of a user, the secondary hub computing device and the IDP computing device disposed in a second country different than the first country;
wherein the IAMH computing device is configured to receive a request related to the user, the request including a request to authenticate the user, to authorize the user and/or for an attribute of the digital identity of the user;
and
wherein at least one of the IAMH computing device and the secondary hub computing device is configured to apply at least one policy specific to the second country to the request, thereby enforcing the at least one policy for the request across the first and second countries.

3 more elements

Dependencies are inferred from the claim text.

Systems and methods for managing digital identities associated with users

Life of this patent

Systems and methods for managing digital identities associated with users

Life of this patent

Abstract

Claims16