System and method for providing a certificate to a user request
Provided is a system and method for providing a certificate, and more specifically a certificate for network access upon a second system based on at least one criteria and an established identity with a first system. The method includes receiving criteria, such as at least one predefined attribute. Also received from a user known to a first system is a request for network access to a second system, the request having at least one identifier. The first system is then queried with the identifier for attributes associated with the user. The attributes associated with the user are evaluated to the predefined attribute(s). In response to at least one attribute associated with the user correlating to the predefined attribute(s), providing a certificate with at least one characteristic for network access on the second system to the user. An associated system for providing a Certificate is also provided.
1. A method of providing a certificate for certificate based wireless network access comprising:
receiving from a user by way of a computing device authenticated to a remote first system a request for access to a second system remote from the first system, the request having at least one identifier, wherein the access is certificate based wireless network access;
receiving at an authorizing system from a third party at least one predefined attribute as criteria for receiving a certificate;
querying, by the authorizing system, the first system with the at least one identifier for attributes associated with the user;
evaluating, by the authorizing system, the attributes associated with the user to the at least one predefined attribute;
providing the user with an X.509 certificate with at least one characteristic derived from the attributed associated with the user for certificate based wireless network access on a secured wireless network of the second system in response to at least one attribute associated with the user correlating to at least one predefined attribute, wherein a first user having a first set of correlating attributes is provided with a certificate permitting different access than a second user having a second set of correlating attributes, the first and second sets being different with respect to at least one correlated attribute; and
enabling a level of access to the secured wireless network of the second system based on the certificate.
2. The method of claim 1 , wherein the at least one predefined attribute is user information.
3. The method of claim 2 , wherein the user information is selected from the group consisting of: username, email address, city, state, gender, age, relationship status.
4. The method of claim 1 , wherein the at least one predefined attribute is an association.
5. The method of claim 4 , wherein the association is selected from the group consisting of: membership in a group, subscribing to another user, being a friend of another user, listing a school/company/employer, likes.
6. The method of claim 1 , wherein the at least one predefined attribute is an action taken by the user.
7. The method of claim 1 , wherein the predefined attribute is received from the second system.
8. The method of claim 1 , wherein the predefined attribute is received from a third party.
9. The method of claim 1 , wherein the first system is a federated web service.
10. The method of claim 1 , wherein the third party is the second system.
11. The method of claim 1 , wherein the characteristic of the certificate is selected from the group consisting of root certificate authority, intermediate certificate authority, time period, common name, subject name, subject's alternative name.
12. The method of claim 1 , wherein the querying of the first system is focused based on the at least one identifier and the at least one predefined attribute.
13. The method of claim 1 , further including:
subsequently querying the first system with the at least one identifier for attributes associated with the user;
evaluating the attributes associated with the user to the at least one predefined attribute; and
in response to at least one prior correlation between an attribute associated with the user and a predefined attribute failing, revoking the certificate.
14. The method of claim 1 , wherein providing the user with a certificate further includes providing the user with a token to generate a certificate.
15. The method of claim 1 , wherein providing the user with a certificate further includes providing the user with instructions to generate a certificate.
16. A non-transitory machine readable medium on which is stored a computer program for providing a certificate for certificate based wireless network access, the computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of:
receiving from a user by way of a computing device authenticated to a remote first system a request for access to a second system remote from the first system, the request having at least one identifier, wherein the access is certificate based wireless network access;
receiving at an authorizing system from a third party at least one predefined attribute as criteria for receiving a certificate;
querying, by the authorizing system, the first system with the at least one identifier for attributes associated with the user;
evaluating, by the authorizing system, the attributes associated with the user to the at least one predefined attribute;
providing the user with an X.509 certificate with at least one characteristic derived from the attributes associated with the user for certificate based wireless network access on a secured wireless network of the second system in response to at least one attribute associated with the user correlating to at least one predefined attribute, wherein a first user having a first set of correlating attributes is provided with a certificate permitting different access than a second user having a second set of correlating attributes, the first and second sets being different with respect to at least one correlated attribute; and
enabling a level of access to the secured wireless network of the second system based on the certificate.
17. The non-transitory machine readable medium of claim 16 , wherein the at least one predefined attribute is user information.
18. The non-transitory machine readable medium of claim 16 , wherein the at least one predefined attribute is an association.
19. The non-transitory machine readable medium of claim 16 , wherein the at least one predefined attribute is a user action.
20. The non-transitory machine readable medium of claim 16 , wherein the predefined attribute is received from the second system.
21. The non-transitory machine readable medium of claim 16 , wherein the predefined attribute is received from a third party.
22. The non-transitory machine readable medium of claim 16 , wherein the first system is a federated web service.
23. The non-transitory machine readable medium of claim 16 , wherein the characteristic of the certificate is selected from the group consisting of root certificate authority, intermediate certificate authority, time period, common name, subject name, subject's alternative name.
24. A non-transitory machine readable medium on which is stored a computer program for providing a certificate for certificate based wireless network access, the computer program comprising instructions which when executed by a computer system having at least one processor performs the steps of:
an input routine operative associated with an input device to receive from a user by way of a computing device authenticated to a remote first system a request for access to a second system remote from the first system, the request having at least one identifier, wherein the access is certificate based wireless network access;
a receiving routine to receive at an authorizing system from a third party at least one predefined attribute as criteria for receiving a certificate;
a query routine to query, by the authorizing system, the first system with the at least one identifier for attributes associated with the user;
an evaluating routine to evaluate, by the authorizing system, the attributes associated with the user to the at least one predefined attribute;
an output routine to provide the user with an X.509 certificate with at least one characteristic derived from the attributes associated with the user for certificate based wireless network access on a secured wireless network of the second system in response to at least one attribute associated with the user correlating to at least one predefined attribute, wherein a first user having a first set of correlating attributes is provided with a certificate permitting different access than a second user having a second set of correlating attributes, the first and second sets being different with respect to at least one correlated attribute, the output routine enabling a level of access to the secured wireless network of the second system based on the certificate.
25. The non-transitory machine readable medium of claim 24 , wherein the at least one predefined attribute is user information.
26. The non-transitory machine readable medium of claim 24 , wherein the at least one predefined attribute is an association.
27. The non-transitory machine readable medium of claim 24 , wherein the at least one predefined attribute is a user action.
28. The non-transitory machine readable medium of claim 24 , wherein the predefined attribute is received from the second system.
29. The non-transitory machine readable medium of claim 24 , wherein the predefined attribute is received from a third party.
30. The non-transitory machine readable medium of claim 24 , wherein the first system is a federated web service.
31. The non-transitory machine readable medium of claim 24 , wherein the characteristic of the certificate is selected from the group consisting of root certificate authority, intermediate certificate authority, time period, common name, subject name, subject's alternative name.
32. A system for providing a certificate for certificate based wireless network access comprising:
a first system having a processor structured and arranged as a single sign on system having a plurality of user accounts for remote users;
a third party system having a processor structured and arranged to establish at least one predefined attribute for receiving a certificate permitting certificate based wireless network access on a second system remote from the first hardware or software system;
an authorizing hardware system having at least one processor structured and arranged to receive from the third party the at least one predefined attribute, and in response to a request by way of a computing device from a user of the first system for a certificate for certificate based wireless network access to the remote second system the authorizing system further structured and arranged to access the first system to query the remote user accounts for attributes associated with at least one user, the authorizing system providing an X.509 certificate with at least one characteristic derived from the attributes associated with the user for certificate based wireless network access on a secured wireless network of the second system to at least one user having at least one attribute associated with the user correlated to the at least one predefined attribute, wherein a first user having a first set of correlating attributes is provided with a certificate permitting different access than a second user having a second set of correlating attributes, the first and second sets being different with respect to at least one correlated attribute, the authorizing system enabling a level of access to the secured wireless network of the second system based on the certificate.
33. The system of claim 32 , wherein the at least one predefined attribute is user information.
34. The system of claim 32 , wherein the at least one predefined attribute is an association.
35. The system of claim 32 , wherein the at least one predefined attribute is a user action.
36. The system of claim 32 , wherein the third party is the second system.
37. The system of claim 32 , wherein the third party is distinct from the second system.
38. The system of claim 32 , wherein the first system is a federated web service.
39. The system of claim 32 , wherein the characteristic of the certificate is selected from the group consisting of root certificate authority, intermediate certificate authority, time period, common name, subject name, subject's alternative name.