Distributed contact information management
View Patent ↗A method and system for interaction with webservices and for performing distributed contact management use standard interfaces to communicate with other entities in an identity management network. The use of homesites as user data stores allows for homesite to homesite communication to allow for distributed contact management, and the generic interface allows for homesite to webservice interaction.
1. A method comprising:
receiving, at a user device distinct from a webservice provider, a request from the webservice provider for user authentication and for authorization for release of information to a third party, the third party distinct from each of the user device, the webservice provider, and a homesite, wherein the request is configured to include an explanation of the information to be provided to the third party and an authentication security level that defines a lowest authentication security level of a plurality of authentication security levels, one of which is to be used for the user authentication;
forwarding, by the user device to the homesite, the received request by causing redirection of a software application to the homesite;
receiving, at the user device from the homesite, an indication of the user authentication, wherein the indication is configured to include a statement that the user authentication was performed at one of the authentication security levels within the plurality of authentication security levels;
obtaining, by the user device, user input indicating an authorization for information release; and
forwarding to the webservice provider, as a response to the request and based on the user input, a message containing an authorization for release of the information, the authorized release from the webservice provider to the third party, wherein the webservice provider is configured to send the information indicated in the message, to the third party, in response to receiving the forwarded message.
2. The method of claim 1 wherein the request from the webservice provider is received via the third party.
3. The method of claim 1 wherein the explanation is a text explanation.
4. The method of claim 1 wherein the explanation is a programmatic explanation.
5. The method of claim 1 wherein the request from the webservice provider includes a nonce.
6. The method of claim 5 wherein the forwarding to the webservice provider includes forwarding the nonce along with the response.
7. The method of claim 1 wherein the forwarding to the webservice provider includes forwarding the response signed by the homesite.
8. The method of claim 1 wherein the forwarding to the webservice provider includes appending proof of authoritativeness for the user.
9. The method of claim 1 wherein the forwarding to the webservice provider includes forwarding the authorization to the webservice provider via the third party.
10. The method of claim 1 , wherein the request includes one or more requests for assertions that are held by the homesite.
11. The method of claim 10 , wherein at least one assertion includes a verifiable statement that a user is a member of an organization.
12. The method of claim 10 , wherein at least one assertion comprises an assertion by a governmental organization.
13. The method of claim 1 , wherein the software application comprises a browser.
14. The method of claim 1 , wherein the forwarding the request to the homesite is performed by including at least one additional request from at least one other webservice provider.
15. The method of claim 1 , wherein the forwarding the request to the homesite is performed by including multiple requests from multiple respective webservice providers.
16. The method of claim 15 , wherein the forwarding to the webservice provider comprises forwarding response segments to each webservice provider.
17. A non-transitory computer-readable medium having instructions stored thereon, the instructions comprising:
instructions for receiving, at a user device distinct from a webservice provider, a request from the webservice provider for user authentication and for authorization for release of information to a third party, the third party distinct from each of the user device, the webservice provider, and a homesite, wherein the request is configured to include an explanation of the information to be provided to the third party and an authentication security level that defines a lowest authentication security level of a plurality of authentication security levels, one of which is to be used for the user authentication;
instructions for forwarding, by the user device to the homesite, the request by causing redirection of a software application to the homesite;
instructions for receiving, at the user device from the homesite, an indication of the user authentication, wherein the indication is configured to include a statement that the user authentication was performed at one of the authentication security levels within the plurality of authentication security levels;
instructions for obtaining, by the user device, user input indicating an authorization for information release; and
instructions for forwarding to the webservice provider, as a response to the request and based on the user input, a message containing an authorization for release of the information, the authorized release from the webservice provider to the third party, wherein the webservice provider is configured to send the information indicated in the authorization, to the third party, in response to receiving the forwarded message.
18. The non-transitory computer-readable medium of claim 17 , wherein the instructions for receiving the request at a user device further comprise instructions for receiving the request from the third party.
19. The non-transitory computer-readable medium of claim 17 wherein the explanation is a text explanation to be shown to the user prior to obtaining the authorization.
20. The non-transitory computer-readable medium of claim 17 wherein the explanation is a programmatic explanation.
21. The non-transitory computer-readable medium of claim 17 wherein the request from the webservice provider includes a nonce.
22. The non-transitory computer-readable medium of claim 21 wherein the instructions for forwarding to the webservice provider include instructions for forwarding the nonce along with the response.
23. The non-transitory computer-readable medium of claim 17 wherein the instructions for forwarding to the webservice provider include instructions for forwarding the response signed by the homesite.
24. The non-transitory computer-readable medium of claim 17 wherein the instructions for forwarding to the webservice provider include instructions for appending proof of authoritativeness for the user.
25. The non-transitory computer-readable medium of claim 17 wherein the instructions for forwarding to the webservice provider include instructions for forwarding the authorization to the webservice provider via the third party.
26. The non-transitory computer-readable medium of claim 17 , wherein the request includes one or more requests for assertions that are held by the homesite.
27. The non-transitory computer-readable medium of claim 26 , wherein at least one assertion includes a verifiable statement that a user is a member of an organization.
28. The non-transitory computer-readable medium of claim 26 , wherein at least one assertion comprises an assertion by a governmental organization.
29. The non-transitory computer-readable medium of claim 17 , wherein the software application comprises a browser.
30. The non-transitory computer-readable medium of claim 17 , wherein the instructions for forwarding the request to the homesite include instructions for forwarding at least one additional request from at least one other webservice provider.
31. The non-transitory computer-readable medium of claim 17 , wherein the instructions for forwarding the request to the homesite include instructions for forwarding multiple requests from multiple respective webservice providers.
32. The non-transitory computer-readable medium of claim 31 , wherein the instructions for forwarding to the webservice provider comprise instructions for forwarding response segments to each webservice provider.
33. A computing device comprising:
one or more processors;
one or more tangible computer-readable media associated with the one or more processors, the one or more tangible computer-readable media having instructions stored thereon, the instructions comprising:
instructions for receiving, at a user device distinct from a webservice provider, a request from the webservice provider for user authentication and for authorization for release of information to a third party, the third party distinct from each of the user device, the webservice provider, and a homesite, wherein the request is configured to include an explanation of the information to be provided to the third party and an authentication security level that defines a lowest authentication security level of a plurality of authentication security levels, one of which is to be used for the user authentication;
instructions for forwarding, by the user device to the homesite, the request by causing redirection of a software application to the homesite;
instructions for receiving, at the user device from the homesite, an indication of the user authentication, wherein the indication is configured to include a statement that the user authentication was performed at one of the authentication security levels within the plurality of authentication security levels;
instructions for obtaining, by the user device, user input indicating an authorization for information release; and
instructions for forwarding to the webservice provider, as a response to the request, a message containing an authorization for release of the information, the authorized release from the webservice provider to the third party, wherein the webservice provider is configured to send the information indicated in the authorization, to the third party, in response to receiving the forwarded message.