Multiple persona information cards
View Patent ↗A computer-implemented method can include selecting an information card from a group of identified information cards, selecting a persona from a group of identified personae that are associated with the selected information card, and generating a Request for Security Token (RST) based on the selected information card and the selected persona.
1. A computer-implemented method for a user having multiple personae, each persona referring to a digital identity that the user can assume as an individual identification, the method comprising:
a computer identifying at least one information card, each information card representing multiple digital identities of the user and having a token service element that has a user credential element, the user credential element including a persona element for specifying a particular credential for a corresponding persona;
the computer selecting one of the identified at least one information card;
the computer identifying at least one persona associated with the selected one of the identified at least one information card;
the computer selecting one of the identified at least one persona; and
the computer generating a Request for Security Token (RST) having a claims element that includes a set of claim type elements that specify which types of claims are to be constructed and further includes a persona element that identifies which persona is to be used in construction of the claims, wherein the RST is based at least in part on the selected one of the identified at least one information card and the selected one of the identified at least one persona.
2. The computer-implemented method of claim 1 , further comprising the computer displaying the identified at least one persona.
3. The computer-implemented method of claim 1 , further comprising the computer transmitting the generated RST to a Security Token Service (STS).
4. The computer-implemented method of claim 1 , wherein identifying the at least one persona is performed by a card selector.
5. The computer-implemented method of claim 1 , further comprising the computer identifying at least one role associated with the selected one of the identified at least one persona.
6. The computer-implemented method of claim 5 , further comprising the computer selecting at least one of the identified at least one role.
7. The computer-implemented method of claim 5 , wherein identifying the at least one persona and identifying the at least one role are performed by a card selector.
8. The computer-implemented method of claim 1 , wherein identifying the at least one persona comprises identifying at least one persona that satisfies a security policy of a relying party.
9. One or more tangible, computer-readable media storing computer-executable instructions that, when executed by a processor, perform the computer-implemented method of claim 1 .
10. A computer-implemented method for a user having multiple personae, each persona referring to a digital identity that the user can assume as an individual identification, the method comprising:
a computer identifying at least one persona;
the computer selecting one of the at least one identified persona;
the computer identifying at least one information card associated with the selected one of the at least one identified persona each information card representing multiple digital identities of the user and having a token service element that has a user credential element, the user credential element including a persona element for specifying a particular credential for a corresponding persona;
the computer selecting one of the at least one identified information card; and
the computer generating a Request for Security Token (RST) having a claims element that includes a set of claim type elements that specify which types of claims are to be constructed and further includes a persona element that identifies which persona is to be used in construction of the claims, wherein the RST is based at least in part on the selected one of the at least one identified persona and the selected one of the at least one identified information card.
11. The computer-implemented method of claim 10 , further comprising the computer transmitting the generated RST to a Security Token Service (STS).
12. The computer-implemented method of claim 10 , wherein identifying the at least one information card is performed by a card selector.
13. The computer-implemented method of claim 10 , further comprising the computer displaying the at least one identified persona.
14. The computer-implemented method of claim 10 , further comprising:
the computer identifying at least one role associated with the selected one of the at least one identified persona; and
the computer selecting one of the at least one identified role.
15. The computer-implemented method of claim 10 , wherein identifying the at least one persona is responsive to selecting at least one of a plurality of roles, wherein each of the at least one identified persona is associated with at least one of the selected at least one of the plurality of roles.
16. One or more tangible, computer-readable media storing computer-executable instructions that, when executed by a processor, perform the computer-implemented method of claim 10 .
17. A machine configured to:
identify and display a plurality of information cards, each information card representing multiple digital identities of a user and having a token service element that has a user credential element, the user credential element including a persona element for specifying a particular credential for a corresponding persona; and
identify and display a plurality of personae, wherein each of the plurality of personae is associated with at least one of the plurality of information cards.
18. The machine of claim 17 , further configured to identify and display a plurality of roles, wherein each of the plurality of roles is associated with at least one of at least one of the plurality of personae and at least one of the plurality of information cards.
19. The machine of claim 17 , further configured to generate a security token request based on a selected one of the plurality of information cards and a selected one of the plurality of personae, the security token request having a claims element that includes a set of claim type elements that specify which types of claims are to be constructed and further includes a persona element that identifies which persona is to be used in construction of the claims.
20. A tangible computer-readable medium storing instructions that, when executed by a processor, cause the processor to perform a method comprising:
identifying a plurality of information cards;
displaying at least some of the plurality of identified information cards;
responsive to a selection of one of the plurality of identified information cards, identifying a plurality of personae associated with the selected information card;
displaying the plurality of personae;
responsive to a selection of one of the plurality of personae, identifying a plurality of roles associated with the selected persona; and
responsive to a selection of at least one of the plurality of roles, generating and transmitting a Request for Security Token (RST), wherein the RST is based at least in part on the selected information card, the selected persona, and the selected at least one role.