Chaining information card selectors
View Patent ↗A machine includes card stores to store information cards. For each card store, one or more card selectors can be provided. When performing a transaction involving information cards, a generic card selector, using a selector policy engine, can identify a card selector to use for the transaction. The identified card selector can be used to identify an information card in a card store to use in performing the transaction, which can be used to provide a security token to the relying party.
1. An apparatus, comprising:
a computer ( 105 );
a plurality of card selectors ( 310 , 320 , 330 ), each card selector ( 310 , 320 , 330 ) associated with at least one card store ( 315 , 325 , 335 );
a generic card selector ( 205 ) to receive a security policy ( 150 );
a selector policy engine ( 305 ) to identify one of the plurality of card selectors ( 310 , 320 , 330 ); and
means for using one of the information cards ( 215 ) in a card store ( 315 , 325 , 335 ) associated with said identified card selector ( 310 , 320 , 330 ) to respond to the security policy ( 150 ).
2. An apparatus according to claim 1 , wherein the selector policy engine ( 305 ) is operative to present to a user the list ( 510 ) of plurality of card selectors ( 310 , 320 , 330 ) and receive from the user an identification of said identified card selector ( 310 , 320 , 330 ).
3. An apparatus according to claim 1 , wherein the selector policy engine ( 305 ) is operative to identify said one of the plurality of card selectors ( 310 , 320 , 330 ) based on at least one of a set including the security policy ( 150 ), a user name ( 405 ), a user data ( 410 ), a user preference ( 415 ) for the card store ( 315 , 325 , 335 ), and a policy ( 420 , 425 , 430 ).
4. An apparatus according to claim 3 , wherein the policy ( 420 , 425 , 430 ) is any of a time-based policy ( 420 ), a location-based policy ( 425 ), or an adaptive policy ( 430 ).
5. An apparatus according to claim 1 , wherein each card store ( 315 , 325 , 335 ) is compatible with only its associated card selector ( 310 , 320 , 330 ).
6. An apparatus according to claim 1 , wherein the generic card selector ( 205 ) includes a plug-in receiver to add the identified card selector ( 310 , 320 , 330 ) to the plurality of card selectors ( 310 , 320 , 330 ).
7. A method for performing a transaction using a generic card selector ( 205 ), comprising:
receiving ( 615 ) a security policy ( 150 ) from a relying party;
identifying ( 620 ) a card selector ( 310 , 320 , 330 ) from a plurality of card selectors ( 310 , 320 , 330 ), each card selector ( 310 , 320 , 330 ) associated with at least one card store ( 315 , 325 , 335 );
using ( 625 ) the identified card selector ( 310 , 320 , 330 ) to identify an information card ( 215 ) in the associated card store ( 315 , 325 , 335 ); and
using ( 630 ) the information card ( 215 ) to satisfy the security policy ( 150 ).
8. A method according to claim 7 , wherein identifying ( 620 ) a card selector ( 310 , 320 , 330 ) includes receiving ( 715 ) from a user a selection of the card selector ( 310 , 320 , 330 ) from the plurality of card selectors ( 310 , 320 , 330 ).
9. A method according to claim 8 , wherein receiving ( 715 ) from a user a selection of the card selector ( 310 , 320 , 330 ) includes presenting ( 710 ) to the user a list ( 510 ) of the plurality of card selectors ( 310 , 320 , 330 ).
10. A method according to claim 7 , wherein identifying a card selector ( 310 , 320 , 330 ) includes automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) based on at least one of a set including the security policy ( 150 ), a user name ( 405 ), a user data ( 410 ), a user preference ( 415 ) for the card store ( 315 , 325 , 335 ), and a policy ( 420 , 425 , 430 ).
11. A method according to claim 7 , wherein automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) includes automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) based on any of a time-based policy ( 420 ), a location-based policy ( 425 ), or an adaptive policy ( 430 ).
12. A method according to claim 7 , wherein identifying ( 620 ) a card selector ( 310 , 320 , 330 ) from a plurality of card selectors ( 310 , 320 , 330 ) includes identifying ( 620 ) the card selector ( 310 , 320 , 330 ) from the plurality of card selectors ( 310 , 320 , 330 ), each card selector ( 310 , 320 , 330 ) associated with at least one card store ( 315 , 325 , 335 ), and each card store ( 315 , 325 , 335 ) compatible only with the associated card selector ( 310 , 320 , 330 ).
13. A method according to claim 7 , further comprising receiving ( 605 ) the card selector ( 310 , 320 , 330 ) as a plug-in to the generic card selector ( 205 ).
14. An article, comprising a non-transitory storage medium, said non-transitory storage medium having stored thereon instructions that, when executed by a machine, result in:
receiving ( 615 ) a security policy ( 150 ) from a relying party;
identifying ( 620 ) a card selector ( 310 , 320 , 330 ) from a plurality of card selectors ( 310 , 320 , 330 ), each card selector ( 310 , 320 , 330 ) associated with at least one card store ( 315 , 325 , 335 );
using ( 625 ) the identified card selector ( 310 , 320 , 330 ) to identify an information card ( 215 ) in the associated card store ( 315 , 325 , 335 ); and
using ( 630 ) the information card ( 215 ) to satisfy the security policy ( 150 ).
15. An article according to claim 14 , wherein identifying ( 620 ) a card selector ( 310 , 320 , 330 ) includes receiving ( 715 ) from a user a selection of the card selector ( 310 , 320 , 330 ) from the plurality of card selectors ( 310 , 320 , 330 ).
16. An article according to claim 15 , wherein receiving ( 715 ) from a user a selection of the card selector ( 310 , 320 , 330 ) includes presenting ( 710 ) to the user a list ( 510 ) of the plurality of card selectors ( 310 , 320 , 330 ).
17. An article according to claim 14 , wherein identifying a card selector ( 310 , 320 , 330 ) includes automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) based on at least one of a set including the security policy ( 150 ), a user name ( 405 ), a user data ( 410 ), a user preference ( 415 ) for the card store ( 315 , 325 , 335 ), and a policy ( 420 , 425 , 430 ).
18. An article according to claim 14 , wherein automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) includes automatically selecting ( 705 ) a card selector ( 310 , 320 , 330 ) based on any of a time-based policy ( 420 ), a location-based policy ( 425 ), or an adaptive policy ( 430 ).
19. An article according to claim 14 , wherein identifying ( 620 ) a card selector ( 310 , 320 , 330 ) from a plurality of card selectors ( 310 , 320 , 330 ) includes identifying ( 620 ) the card selector ( 310 , 320 , 330 ) from the plurality of card selectors ( 310 , 320 , 330 ), each card selector ( 310 , 320 , 330 ) associated with at least one card store ( 315 , 325 , 335 ), and each card store ( 315 , 325 , 335 ) compatible only with the associated card selector ( 310 , 320 , 330 ).
20. An article according to claim 14 , wherein said non-transitory storage medium has stored thereon further instructions that, when executed by said machine, result in receiving ( 605 ) the card selector ( 310 , 320 , 330 ) as a plug-in to the generic card selector ( 205 ).