US 11,082,418 B2 · Privacy ensured brokered identity federation

Abstract

A system, method, apparatus, and computer program product for a privacy ensured brokered identity federation system. The privacy ensured brokered identity federation system connects a user in a brokered identity federation environment that blinds relying parties (RP) from credential service providers (CSP), blinds CSPs from RPs, and blinds a user's identity and data from the federation middleware hubs. The system utilizes ring signatures to attest to CSPs that a valid RP of the federation is making a request. The process utilizes CSP ring signatures to assure RPs that a valid CSP of the federation has provided a response. The process utilizes per transaction encryption keys created by the RP to ensure the federation has no access to data messages. It can further ensure that only the correct RP can decrypt a CSP response.

Claims11

Dependent claims

A privacy ensured brokered identity federation system, comprising:

a computer having a user interface;
and
a program product comprising machine-readable program code for causing, when executed, the computer to perform the following process steps:
receiving an authentication request at a server hosting a brokered identity federation service, the authentication request comprising a transaction specific encryption key pair (TEK);
a ring signature;
and a transaction ID;
responsive to receiving the authentication request, presenting a credential service provider (CSP) selection page displaying one or more CSP participants in the brokered identity federation service;
and
responsive to a user selection of a selected CSP, transmitting the authentication request to a CSP endpoint connector associated with the selected CSP after receipt of a request from the selected CSP endpoint connector containing the transaction ID of the authentication request.

6 more elements

Dependencies are inferred from the claim text.

Privacy ensured brokered identity federation

Life of this patent

Privacy ensured brokered identity federation

Life of this patent

Abstract

Claims11