US 7,827,318 B2Granted

User enrollment in an e-community

AssigneeInternational Business Machines Corporation

InventorsHeather Maria Hinton, George Robert Blakley, III, Greg Clark

Life of this patent

Estimating the term…

Loading patent…

Abstract

An Internet user transfers directly to a domain within an e-community without returning to a home domain or reauthenticating by providing to a web browser by a home domain server a home identity cookie with an extensible data area and an enrollment token; performing enrollment through an e-community for a web-browser user by redirecting the home identity cookie via the web browser to each affiliated domain in the e-community until each has been visited once; responsive to each visit to each affiliated domain, sending an affiliated domain identity cookie to the web browser including an enrollment successful indicator; accumulating received enrollment success indicators in the extensible data area of the home identity cookie; and subsequently, vouching for an identity of the user at an affiliated domain through exchange of a vouch-for request and vouch-for response between the home domain server and an affiliated domain server.

Claims18

Dependent claims

A computer memory device comprising:

a computer memory device suitable for encoding software instructions;
and
one or more software instructions encoded by the computer memory device configured to cause a processor to:
provide to a web browser by a home domain server a home identity cookie having an extensible data area and an enrollment token;
perform enrollment through an e-community for a user of the web browser by redirecting the home identity cookie via the web browser to each of a plurality of affiliated domains in the e-community until each affiliated domain has been visited once by the web browser;
responsive to each visit to each affiliated domain, send an affiliated domain identity cookie to the web browser including an enrollment successful indicator;
accumulate and persistently store received enrollment success indicators in the extensible data area of the home identity cookie by the web browser;
and
subsequently vouch for an identity of the user at an affiliated domain through exchange of a vouch-for request and vouch-for response between the home domain server and an affiliated domain server.

6 more elements

A system comprising:

at least one processor, electronic circuit or combination of processor and electronic circuit configured to perform a logical process, the logical process comprising:
providing to a web browser by a home domain server a home identity cookie having an extensible data area and an enrollment token;
performing enrollment through an e-community for a user of the web browser by redirecting the home identity cookie via the web browser to each of a plurality of affiliated domains in the e-community until each affiliated domain has been visited once by the web browser;
responsive to each visit to each affiliated domain, sending an affiliated domain identity cookie to the web browser including an enrollment successful indicator;
accumulating and persistently storing received enrollment success indicators in the extensible data area of the home identity cookie by the web browser;
and
subsequently vouching for an identity of the user at an affiliated domain through exchange of a vouch-for request and vouch-for response between the home domain serve.

4 more elements

Dependencies are inferred from the claim text.

Facts

Application: 12/274,869Filed 20 Nov 2008 · continuation
Priority: 19 Dec 2001
Published: US 2009/0094383 A19 Apr 2009
Granted: 2 Nov 2010
Term ends: Not estimatedThe source records don’t support an estimate.

Classification7 codes

H04L 63/08
Network architectures or network communication protocols for network security: for authentication of entities
G06F 21/41
User authentication: where a single sign-on provides access to a plurality of computers
H04L 63/0815
For authentication of entities: providing single-sign-on or federations
H04L 63/06
Network architectures or network communication protocols for network security: for supporting key management in a packet data network

Family

Application10/034,725Parent of this continuation · filed 19 Dec 2001
Application11/245,296Parent of this continuation · filed 6 Oct 2005
US 2009/0094383 A1Pre-grant publication · published 9 Apr 2009
US 7,484,012 B2Parent of this continuation
US 6,993,596 B2Parent of this continuation
US 2003/0115267 A1Published application
US 2006/0031592 A1Published application
US 7,827,318 B2This patent

From the US filing history. Foreign family members aren’t listed.