Patent Application

App. No. 12/402,782

Abstract

Claims (43)

1 . An apparatus, comprising:

a client accessed by a user, said user having a user identity;

a card selector on the client to allow said user to select an information card based on a security policy and to provide a particular security token responsive to said selected information card;

a query generator on the client to generate a query based on said selected information card, said query pertaining to information about features that are available on a relying party based on said particular security token and independent of said user identity; and

a transmitter on the client to transmit said-generated query and said particular security token to an endpoint on said relying party.

2 . The apparatus of claim 1 , wherein said available features are drawn from a set including user privileges, relying party services, relying party capabilities, and temporal constraints.

3 . The apparatus of claim 1 , wherein said available features pertain to a dynamically created account on said relying party.

4 . The apparatus of claim 1 , further comprising a receiver on the client to receive said security policy from said relying party.

5 . The apparatus of claim 1 , further comprising a receiver on the client to receive a response to said transmitted query from said relying party.

6 . The apparatus of claim 5 , wherein the card selector is further operable to provide said user with information pertaining to said response received from said relying party.

7 . The apparatus of claim 6 , further comprising a display module to graphically present to said user at least some of said information pertaining to said response received from said relying party.

8 . A computer-implemented method, comprising:

identifying one or more information cards accessible to a card selector;

presenting the one or more identified information cards to a user;

receiving a selection by the user of one of the one or more information cards presented to the user;

providing a security token based at least in part on the selected information card;

generating a query pertaining to information about features that are available on the relying party based on the security token and independent of an identity of the user; and

transmitting the generated query to an endpoint on a relying party.

9 . The computer-implemented method of claim 8 , wherein the available features are drawn from a set including user privileges, relying party services, relying party capabilities, and temporal constraints.

10 . The computer-implemented method of claim 8 , wherein the available features pertain to a dynamically created account on the relying party.

11 . The computer-implemented method of claim 8 , further comprising receiving from the relying party a response to the generated query.

12 . The computer-implemented method of claim 11 , further comprising providing the user with information pertaining to the response to the generated query.

13 . The computer-implemented method of claim 11 , further comprising displaying at least some of the information pertaining to the response to the generated query.

14 . The computer-implemented method of claim 11 , further comprising:

identifying one or more secondary information cards accessible to the card selector based on the response to the generated query;

presenting the one or more identified secondary information cards to the user; and

receiving a selection by the user of one of the one or more secondary information cards presented to the user.

15 . The computer-implemented method of claim 14 , wherein the one or more identified secondary information cards excludes the selected information card.

16 . The computer-implemented method of claim 14 , further comprising:

token based at least in part on the selected secondary information card;

generating a second query pertaining to information about features that are available on the relying party based on the second security token and independent of the identity of the user; and

transmitting the second generated query to the endpoint on the relying party.

17 . The computer-implemented method of claim 16 , further comprising receiving from the relying party a second response to the second generated query.

18 . The computer-implemented method of claim 17 , further comprising providing the user with information pertaining to the second response to the second generated query.

19 . The computer-implemented method of claim 18 , wherein providing the user with information includes displaying at least some of the information pertaining to the second response to the second generated query.

20 . The computer-implemented method of claim 8 , further comprising:

receiving a second selection by the user of a second one of the one or more information cards presented to the user; and

providing a second security token based at least in part on the second selected information card; and

generating a second query pertaining to information about features that are available on the relying party based on the second security token and independent of the identity of the user.

21 . The computer-implemented method of claim 20 , further comprising transmitting the second generated query to the endpoint on the relying party.

22 . The computer-implemented method of claim 8 , further comprising receiving a security policy from the relying party.

23 . The computer-implemented method of claim 8 , further comprising transmitting the security token to the endpoint on the relying party.

24 . One or more tangible, computer-readable media storing computer-executable instructions that, when executed by a processor, cause the processor to perform the computer-implemented method of claim 8 .

Assignments (8)