Patent ID: 7784085
Filing Date: 2010-08-24
Classification: G06F,H04L

Abstract:
1. A system for identifying a principal in a first circle of trust, comprising: a service provider within the first circle of trust, wherein the first circle of trust is implemented using a first architecture; a first identity provider comprising a first computer processor and operatively connected to the service provider in the first circle of trust, wherein the first identity provider is configured to: receive a request for identity information associated with the principal from the service provider; determine that no identification exists for the principal within the first circle of trust; generate a translated identity assertion request by translating the request for identity information to be in compliance with a second architecture; and a second identity provider, comprising a second computer processor, within a second circle of trust and configured to: receive the translated identity assertion request from the first identity provider; generate identity information associated with the principal in response to the translated identity assertion request; and send the identity information associated with the principal to the first identity provider in the first circle of trust, wherein the second circle of trust is implemented using the second architecture, and wherein the first identity provider in the first circle of trust is further configured to translate identity information associated with the principal received from the second identity provider into a format compliant with the first architecture and provide the identity information received from the second identity provider to the service provider.