Loading patent…
AssigneeInternational Business Machines Corporation
InventorsParag Gokhale, Sakshi Malik, Shlok Sanjay Gilda, Shams Hasan Rizvi, Rohan Poulose
Estimating the term…
An identity management system is augmented to compute a time-varying confidence score for an asserted attribute value, typically a value that is received from a third party identity issuer. In this approach, an identity provider (IdP) computes a time-varying confidence score for an asserted attribute that the IdP includes in a security assertion returned to a service provider. The confidence score typically is “deteriorating” (i.e., diminishes over time) for an attribute value. The degree to which the score deteriorates, however, may be altered by one or more qualified attribute verification event(s). Preferably, the IdP maintains a profile of the service provider, and that profile may also include other information, such as a threshold for an attribute confidence score that the SP deems acceptable (to enable access to the service). Based on the SP profiling, the IdP also can recommend use of a given identity issuer for a specific attribute.
A method to authorize a request to access a protected resource, the request being received from a service provider and being associated with a requesting entity having one or more associated identity issuers, comprising:
An apparatus, comprising:
A computer program product in a non-transitory computer readable medium for use in a data processing system, the computer program product holding computer program instructions which, when executed by the data processing system, to authorize a request to access a protected resource, the request being received from a service provider and being associated with a requesting entity having one or more associated identity issuers, the computer program instructions comprising program code configured to:
Dependencies are inferred from the claim text.