Method and a system for managing user identities for use during communication between two web browsers

A method performed by a first web browser installed on a communication terminal of a first user, the method comprising:

• obtaining at least one first data item characteristic of a second user from a second web browser installed on a communication terminal of the second user, the at least one first data item characteristic of the second user being a public key of a public and secret key pair allocated to the second user;
• and
• communicating with a trusted entity for identifying the first user to associate, in the trusted entity, an identity of the first user with the at least one data item characteristic of the second user, the associating comprising registering in the trusted entity the identity of the first user in association with the at least one first data item characteristic of the second user to allow the trusted entity to send the identity of the first user to the second browser upon confirmation that the second user holds at least one second data item of the second user corresponding to the first data item characteristic of the second user.

A method performed by a trusted entity during communication between a first web browser installed on a communication terminal of a first user and a second web browser installed on a communication terminal of a second user, the trusted entity for identifying the first user, the method comprising:

• associating an identity of the first user with at least one first data item characteristic of the second user, the at least one first data item characteristic of the second user being a public key of a public and secret key pair allocated to the second user, the public key being obtained by the first browser from the second browser, the associating comprising registering the identity of the first user in association with the at least one first data item characteristic of the second user;
• and
• after the trusted entity has received proof that the second user holds at least one second data item of the second user corresponding to the first data item characteristic of the second user, making available to the second user the identity of the first user registered in association with the at least one first data item characteristic of the second user, the making available comprising the trusted entity sending the identity of the first user to the second browser.

A communication terminal of a first user having installed thereon a web browser the communication terminal configured to:

• obtain at least one first data item characteristic of a second user from a second web browser installed on a communication terminal of the second user, the at least one first data item characteristic of the second user being a public key of a public and secret key pair allocated to the second user;
• and
• communicate with a trusted entity for authenticating the first user in order to associate an identity of the first user in the trusted entity with the at least one first data item characteristic of the second user, the association comprising registering in the trusted entity the identity of the first user in association with the at least one first data item characteristic of the second user to allow the trusted entity to send the identity of the first user to the second web browser upon confirmation that the second user holds at least one second data item of the second user corresponding to the first data item characteristic of the second user.

A trusted entity operable during communication between a first web browser installed on a communication terminal of a first user and a second web browser installed on a communication terminal of a second user, the trusted entity configured to:

• associate an identity of the first user with at least one first data item characteristic of the second user, the at least one first data item characteristic of the second user being a public key of a public and secret key pair allocated to the second user, the association comprising registering the identity of the first user in association with the at least one first data item characteristic of the second user;
• and
• upon receiving proof that the second user holds at least one second data item of the second user corresponding to the first data item characteristic of the second user, making available to the second user the identity of the first user registered in association with the at least one first data item characteristic of the second user by sending the identity of the first user to the second browser.