User equipment and method in UE

Abstract

Users desire useable security or a seamless means for accessing internet services whereby user interaction in the provisioning of credentials may be kept to a minimum or even eliminated entirely. The Single Sign-On identity management concept enables user- assisted and network- assisted authentication for access to desired services. To enable seamless authentication services to users, a unified framework and a protocol layer interface for managing multiple authentication methods may be used. A user equipment, UE, comprises a user application (202, 204) configured to communicate with a service provider to access a service and a plurality of network- assisted authentication modules (208-216), each network-assisted authentication module corresponding to a different network-assisted authentication protocol. The UE further comprises a single sign-on subsystem (206) configured to authenticate a user of the UE based on user-assisted authentication information at the UE and / or network and to select one of the network-assisted authentication modules based on one more policies.

Description

[0001] This application is a divisional application of a Chinese patent application with a filing date of April 27, 2012, an application number of 201280020818.9, and a title of "SSO framework for multiple SSO technologies". [0002] Cross References to Related Applications [0003] This application claims the benefit of U.S. Provisional Patent Application Serial No. 61 / 480,137, filed April 28, 2011, and U.S. Provisional Patent Application Serial No. 61 / 548,156, filed October 17, 2011, the contents of which are incorporated by reference here. Background technique [0004] Due to the increased use of smartphones to access Internet services, mobile user security requirements have increased. For example, banking services, ticketing services for entertainment events, etc. may require integrity, privacy protection, and user authentication. These requirements may place an authentication burden directly on the user in the form of usernames, personal identification numbers (pins), a...

AI Technical Summary

Problems solved by technology

However, handling many accounts with separate user-supplied credentials for each could potentially place too much authentication burden on the user in terms of, for example, credential fatigue

Users can create a security vulnerability if they attempt to simplify processing by using easy-to-remember credentials or reusing the same credentials across multiple domains

Images