Method and apparatus for trusted federated identity

Abstract

A trusted computing environment, such as a smartcard, UICC, Java card, global platform, or the like may be used as a local host trust center and a proxy for a single-sign on (SSO) provider. This may be referred to as a local SSO provider (OP). This may be done, for example, to keep authentication traffic local and to prevent over the air communications, which may burden an operator network. To establish the OP proxy in the trusted environment, the trusted environment may bind to the SSO provider in a number of ways. For example, the SSO provider may interoperate with UICC-based UE authentication or GBA. In this way, user equipment may leverage the trusted environment in order to provide increased security and reduce over the air communications and authentication burden on the OP or operator network.

Description

[0001] cross reference [0002] This application claims the benefit of U.S. Provisional Patent Application No. 61 / 396,602, filed May 28, 2010, entitled "Identity Management on a Communications Device," and Priority to U.S. Provisional Patent Application No. 61 / 302,890, filed "Method and Apparatus for Implementing Local and Mobile OpenID Provider," which The contents of are incorporated herein by reference in their entirety. Background technique [0003] Internet users typically have multiple usernames and passwords that can be used for user authentication in order to access multiple web sites. For example, an Internet user may have a username / password combination for accessing a social networking site such as Facebook, and another username / password combination for accessing an email site such as Gmail. While having multiple username / password combinations may be necessary for user authentication, Internet users may find it cumbersome to remember each username / password combina...

AI Technical Summary

Problems solved by technology

However, there are some pitfalls when implementing SSO as a web service

For example, a user may not have a secure channel to a web-based SSO provider

Additionally, the user's control over the SSO provider may be limited

[0005] Furthermore, authentication in SSO has the potential to generate communication over the air interface, which may result in a load on network entities (i.e. OpenID providers (OP or NAF) and on the network itself due to increased traffic

Additionally, the mobile network operator (MNO) may have to bear the cost of this additional service and processing

Images