User identity management for permitting interworking of a bootstrapping architecture and a shared identity service
View Patent ↗A method, apparatus and computer program product are provided to facilitate authentication of a request, such as by a mobile terminal, while also supplying information about the user to a service, website, application or the like A method, apparatus and computer program product may provide for interworking a bootstrapping architecture, such as Generic Bootstrapping Architecture, and a shared identity service, such as OpenID architecture In this regard, a method, apparatus and computer program product may provide for a secure session with a service provider through Generic Bootstrapping Architecture while being able to supply the service provider with the user information and/or accessing a user account using OpenID architecture.
1. A method comprising:
causing a request including a user identifier to be provided to a service provider;
receiving, at a user equipment, a re-direction including the user identifier, wherein the re-direction is to a shared identity service;
causing, by the user equipment, an authentication request to be provided to the shared identity service shared among a plurality of service providers including the service provider in order to enable a shared identity service authentication, based on the user identifier;
receiving, at the user equipment in response to the causing the authentication request, the shared identity service authentication;
establishing a user session security key using at least a generic bootstrapping architecture; and
establishing a session with the service provider using the user session security key and the shared identity service authentication.
2. The method according to claim 1 , wherein the user identifier is a pseudonym.
3. The method according to claim 1 , wherein the user session security key is a bootstrapping transaction identifier.
4. The method according to claim 1 , wherein the service provider establishes a shared secret with the shared identity service in response to receiving the request.
5. The method according to claim 1 , wherein establishing the session with the service provider comprises supplying the user security key to a network application function, receiving authentication information from the network application function in response to supplying the user security key, and providing an authentication assertion to the service provider.
6. An apparatus comprising at least one processor and at least one memory including computer program code, the at least one memory and the computer program code configured to, with the at least one processor, cause the apparatus to perform at least the following:
cause a request including a user identifier to be provided to a service provider;
receive a re-direction including the user identifier, wherein the re-direction is to a shared identity service;
cause, by the user equipment, an authentication request to be provided to the shared identity service shared among a plurality of service providers including the service provider in order to enable a shared identity service authentication, based on the user identifier;
receive, at the user equipment in response to the causing the authentication request, the shared identity service authentication;
establish a user session security key using at least a generic bootstrapping architecture; and
establish a session with the service provider using the user session security key and the shared identity service authentication.
7. The apparatus according to claim 6 , wherein the request to the service provider includes a user identifier.
8. The apparatus according to claim 7 , wherein the user identifier is a pseudonym.
9. The apparatus according to claim 6 , wherein the user session security key is a bootstrapping transaction identifier.
10. The apparatus according to claim 6 , wherein the service provider establishes a shared secret with the shared identity service in response to receiving the request.
11. The apparatus according to claim 6 , wherein establishing a session with the service provider comprises supplying the user security key to a network application function, receiving authentication information from the network application function in response to supplying the user security key, and providing an authentication assertion to the service provider.
12. A computer program product comprising at least one non-transitory computer-readable storage medium having computer-executable program code instructions stored therein which when executed by at least one processor causes operations comprising:
causing a request including a user identifier to be provided to a service provider;
receiving, at a user equipment, a re-direction including the user identifier, wherein the re-direction is to a shared identity service;
causing, by the user equipment, an authentication request to be provided to the shared identity service shared among a plurality of service providers including the service provider in order to enable a shared identity service authentication, based on the user identifier;
receiving, at the user equipment in response to the causing the authentication request, the shared identity service authentication;
establishing a user session security key using at least a generic bootstrapping architecture;
and
establishing a session with the service provider using the user session security key and the shared identity service authentication.
13. The computer program product according to claim 12 , wherein the request to the service provider includes a user identifier.
14. The computer program product according to claim 13 , wherein the user identifier is a pseudonym.
15. The computer program product according to claim 12 , wherein the user session security key is a bootstrapping transaction identifier.
16. The computer program product according to claim 12 , wherein the service provider establishes a shared secret with the shared identity service in response to receiving the request.
17. The computer program product according to claim 12 , wherein the establishing the session with the service provider comprises supplying the user security key to a network application function, receiving authentication information from the network application function in response to supplying the user security key, and providing an authentication assertion to the service provider.