Controlling identity disclosures
Controlling identity disclosures is disclosed. A difference between a site policy as received at a first time and the site policy as received at a second time is detected through at least partially automated processing. The existence of the difference is indicated before disclosing to a relying party associated with the site policy, at or subsequent to the second time, an identity information.
1. A method for controlling identity disclosures comprising:
receiving a request to provide identity information of a user to a site;
receiving a current site policy associated with the site, wherein receiving the current site policy comprises at least one of retrieving the current site policy from a user specified location and retrieving the current site policy from a specified site policy location of the site;
detecting, via at least one computer processor, a difference between the current site policy and a previous site policy associated with the site, wherein the difference is detected based at least in part on information received from a third party;
indicating an existence of the difference before providing the user identity information to the site;
providing to the user an interface for specifying which one or more of a plurality of policy types to track; and
receiving from the user a specification of which one or more of a plurality of policy types to track, wherein the policies are of a type specified by the user for tracking.
2. The method of claim 1 wherein either the current site policy or the previous site policy is null and the difference is the addition or deletion of the site policy, respectively.
3. The method of claim 1 wherein the site policy includes a privacy policy.
4. The method of claim 1 wherein the site policy includes a term of service.
5. The method of claim 1 wherein detecting a difference includes performing a hash of the current site policy and the previous site policy.
6. The method of claim 1 wherein detecting a difference includes performing a diff of the current site policy and the previous site policy.
7. The method of claim 1 wherein detecting a difference includes evaluating a digital signature.
8. The method of claim 1 wherein the existence of the difference is indicated to the user.
9. The method of claim 1 wherein the user is a first user and wherein the existence of the difference is indicated to a second user.
10. The method of claim 1 wherein the indication includes a textual representation of the difference.
11. The method of claim 1 wherein the indication includes a graphical representation of the difference.
12. The method of claim 1 wherein the indication of the difference includes a change in color.
13. The method of claim 1 wherein the third party digitally signs one or more of the site policies.
14. The method of claim 1 wherein the site policy is received from a site that makes use of at least one of the: OpenID, Meebo, Sxip, Google TPass, Verisign Personal Identity Provider, and CardSpace frameworks.
15. A system for controlling identity disclosures, including:
a processor; and
a memory coupled with the processor, wherein the memory is configured to provide the processor with instructions which when executed cause the processor to:
receive a request to provide identity information of a user to a site;
receive a current site policy associated with the site, wherein receiving the current site policy comprises at least one of retrieving the current site policy from a user specified location and retrieving the current site policy from a specified site policy location of the site;
detect a difference between the current site policy and a previous site policy associated with the site, wherein the difference is detected based at least in part on information received from a third party;
indicate an existence of the difference before providing the user identity information;
provide to the user an interface for specifying which one or more of a plurality of policy types to track; and
receive from the user a specification of which one or more of a plurality of policy types to track, wherein the policies are of a type specified by the user for tracking.
16. The system of claim 15 wherein the instructions cause the processor to detect the difference at least in part by performing a hash of the current site policy and the previous site policy.
17. The system of claim 15 wherein the existence of the difference is indicated to the user.
18. The system of claim 15 wherein the indication includes a representation of the difference.
19. An article of manufacture for controlling identity disclosures, the article of manufacture comprising:
at least one non-transitory processor readable storage medium; and
instructions stored on the at least one non-transitory processor readable storage medium;
wherein the instructions are readable from the at least one non-transitory processor readable storage medium by at least one processor and thereby cause the at least one processor to operate to:
receive a request to provide identity information of a user to a site;
receive a current site policy associated with the site, wherein receiving the current site policy comprises at least one of retrieving the current site policy from a user specified location and retrieving the current site policy from a specified site policy location of the site;
detect a difference between the current site policy and a previous site policy associated with the site, wherein the difference is detected based at least in part on information received from a third party;
indicate an existence of the difference before providing the user identity information to the site;
provide to the user an interface for specifying which one or more of a plurality of policy types to track; and
receive from the user a specification of which one or more of a plurality of policy types to track, wherein the policies are of a type specified by the user for tracking.