Method and apparatus to provide a user profile for use with a secure content service
A secure content service available through a network comprising a user profile stored in a user profile store and a profile access controller to enforce access rights to the user profile, wherein the user profile is used to provide access rights to other content.
1 . A secure content service available through a network, the secure content service comprising:
a user profile store to store a plurality of user profiles including attributes, the user profile used for authentication on the network;
a user profile log to log all accesses to a user profile, the user profile log accessible to the user for review; and
monitoring and logging logic to monitor the user profile log for anomalous activities.
2 . The secure content service of claim 1 , wherein the user profile has a reliance score indicating a level of confidence in the profile information.
3 . The secure content service of claim 1 , further comprising:
a profile creation mechanism enabling a user to create a new profile in the system, the new profile identified by a unique identifier.
4 . The secure content service of claim 3 , wherein the unique identifier is a universal resource indicator (URI) which provides access to the profile.
5 . The secure content service of claim 3 , wherein the new profile is based on a template including a plurality of attributes which may be filled out by the user.
6 . The secure content service of claim 5 , wherein at least one of the plurality of attributes is extendible.
7 . The secure content service of claim 5 , further comprising user-defined attributes which may be added to the new user profile.
8 . The secure content service of claim 5 , further comprising third party authentication associated with one or more attributes.
9 . The secure content service of claim 5 , further comprising custom attributes which may be added by the user.
10 . The secure content service of claim 9 , wherein the custom attributes are propagated to the template.
11 . The secure content service of claim 10 , wherein the custom attributes are propagated to the template when the custom attributes are acceptable, adopted by a sufficient group, and/or approved by an authorized administrator.
12 . The secure content service of claim 1 , further comprising:
a profile creation mechanism enabling a user to copy and paste an existing profile to create a new profile with attributes copied from the existing profile.
13 . The secure content service of claim 1 , further comprising:
a monitoring and logging logic to log each access to the secure content service, and to monitor the log, to provide security for the user
14 . The secure content service of claim 13 , wherein the monitoring and logging logic is for identifying anomalous access requests, wherein an access request is logged for each encryption and decryption request, the service further comprising:
an alert logic to notify the user of the anomalous request.
15 . The secure content service of claim 13 , wherein the monitoring and logging logic may be used to provide proof-of-reading receipts for encrypted content.
16 . The secure content service of claim 13 , wherein the monitoring and logging logic is further for identifying access requests to the user profile that require real-time authorization from the user, and further:
an alert logic to request real-time authorization from the user, and provide access to the user profile only when authorization is received.
17 . A secure content service available through a network comprising:
a user profile stored in a user profile store;
a profile access controller to enforce access rights to the user profile, wherein the user profile is used to provide access rights to other content.