Back to results
US 8,301,901 B2Granted
System and method for expressing and evaluating signed reputation assertions
AssigneeEMC Corporation
InventorDuane Buss
Life of this patent
Estimating the term…
Abstract
A method for expressing and evaluating signed reputation assertions is disclosed. In one embodiment, a first entity receives a request to generate a signed assertion relating to a piece of content. The first entity generates a reputation statement about a second entity from reputation-forming information (RFI) about the second entity available to the first entity. The first entity then generates a signed assertion from the reputation statement and the piece of content at least in part by binding the piece of content to the reputation statement and signing a portion encompassing at least one of the bound piece of content and the bound reputation statement. The signed assertion is then transmitted to a receiving entity.
Claims20
A computer-implemented method comprising:
- providing a processor capable of manipulating electrical signals;
- providing a network interface, the network interface including a physical or wireless connection to a network;
- receiving a request via the network interface to generate a signed assertion relating to a piece of content;
- using an executable reputation statement generation process to create a reputation statement concerning a known entity from reputation-forming information (RFI) associated with the known entity, the reputation statement relating to a quality or characteristic of the known entity;
- generating by a different entity a signed assertion from the reputation statement and the piece of content, the generating comprising embedding the piece of content and the reputation statement with an assertion and signing a portion of the assertion comprising at least one of the embedded piece of content and the embedded reputation statement to generate said signed assertion, wherein the generating comprises generating the signed assertion to have a validity that is restricted by one or both of a time restriction and a restriction that limits use of the signed assertion to a predetermined use, and is accomplished by manipulating electrical signals within the processor, and
- wherein the signed assertion includes at least a portion of the RFI used to generate the reputation statement and a representation of the executable reputation statement generation process;
- and
- transmitting the signed assertion via the network interface.
5 more elements
A method comprising:
- providing a computer system, the computer system including a processor, network interface, storage device, and storage interface;
- at a computing module executed by the processor of the computer system, receiving a signed assertion embedded with an associated piece of content and a reputation statement relating to a quality or characteristic of a first entity, the signed assertion being received from the network interface and having a validity that is restricted by one or both of a time restriction and a restriction that limits use of the signed assertion to a predetermined use, wherein the signed assertion presents information associated with the first entity and is signed by a second entity;
- wherein the signed assertion includes first data regarding the signature and the embedded content;
- evaluating the signed assertion to produce an intermediate result by manipulating electrical signals within the processor, wherein the evaluating includes verifying the signed assertion using the first data;
- using the intermediate result in accordance with said restrictions to modify a reputation value associated with the first entity and storing a processor-interpretable representation of the reputation value by inducing a physical state change in the storage device via the storage interface.
2 more elements
A system comprising:
- a network coupling first, second, and third processors forming, respectively, first, second and third processing entities,
- wherein the first processing entity is adapted to:
- receive an assertion request specifying a piece of content and an identity specifier associated with the second processing entity;
- generate a reputation statement from reputation-forming information (RFI) associated with the second processing entity, wherein the reputation statement relates to a quality or characteristic of the second processing entity and includes a portion of the RFI;
- generate a signed assertion by embedding the piece of content with the reputation statement and signing a portion comprising one of the piece of content and the reputation statement, the signed assertion having a validity that is restricted by one or both a time restriction and a use restriction;
- and
- transmit the signed assertion;
- and
- wherein the third processing entity is adapted to:
- receive the signed assertion;
- evaluate the signed assertion to produce an intermediate result;
- and
- use the intermediate result to modify a reputation value associated with the second processing entity.
10 more elements
Dependencies are inferred from the claim text.