Access to domain
The invention relates to a method of allowing access to an authorized domain ( 100 ), the authorized domain ( 100 ) being managed by a domain manager ( 210 ), comprising a step in which a user authentication device ( 220 ), which user authentication device is linked to a foreign device ( 201 ), asserts to the domain manager that a local link ( 205 ) between the user authentication device and the foreign device is limited in distance, and a step in which the domain manager allows the foreign device to operate as a member of the authorized domain if the assertion is accepted as accurate.
1. A method of allowing access to an authorized domain managed by a domain manager, the method comprising acts of:
a user authentication device linked to a foreign device, asserting to the domain manager that a local link between the user authentication device and the foreign device is limited in distance; and
when the assertion is true the domain manager providing the foreign device with a domain context including domain keys for decrypting object rights related to the authorized domain to allow the foreign device to operate as a temporary member of the authorized domain, the domain context is required to be removed after a period of time;
wherein the assertion is based on a close proximity communication protocol requirement, an authentication protocol requirement, and a domain registration protocol requirement.
2. The method of claim 1 , wherein the user authentication device comprises a Secure Identification Module in a mobile phone.
3. The method of claim 1 , further comprising an act of establishing the local link using a Near-Field Communication connection.
4. The method of claim 1 , wherein asserting comprises an act of executing an authenticated distance measuring protocol between the user authentication device and the foreign device.
5. The method of claim 1 , further comprising an act of establishing an authorization link between the domain manager and the foreign device.
6. The method of claim 5 , further comprising an act of the domain manager authenticating the foreign device.
7. The method of claim 1 , further comprising an act of the user authentication device authenticating the foreign device.
8. The method of claim 1 , further comprising an act of the foreign device operating as a member of the authorized domain for a predetermined period of time.
9. An authorized domain system, comprising:
a user authentication device linked to a foreign device for asserting to the domain manager that a local link between the user authentication device and the foreign device is limited in distance; and
a domain manager for managing the authorized domain and, when the assertion is true, configured to provide the foreign device with a domain context including domain keys for decrypting object rights related to the authorized domain to allow the foreign device to operate as a temporary member of the authorized domain, the domain context is required to be removed after a certain period of time;
wherein the assertion is based on a close proximity communication protocol requirement, an authentication protocol requirement, and a domain registration protocol requirement.
10. A non-transitory computer readable medium storing a series of programmable instructions configured for execution by at least one processor for performing a method of allowing access to an authorized domain managed by a domain manager, the method comprising acts of:
a user authentication device linked to a foreign device, asserting to the domain manager that a local link between the user authentication device and the foreign device is limited in distance, and
when the assertion is true the domain manager providing the foreign device with a domain context including domain keys for decrypting object rights related to the authorized domain to allow the foreign device to operate as a temporary member of the authorized domain, the domain context is required to be removed after a certain period of time;
wherein the assertion is based on a close proximity communication protocol requirement, an authentication protocol requirement, and a domain registration protocol requirement.