Patent ID: 8910244
Filing Date: 2014-12-09
Classification: G06F,H04L

Abstract:
1. A method for establishing an Identity Management (IDM) trust comprising: receiving, by a Service Provider (SP), a service request from a user; determining, by the SP, whether an Identification Provider (IDP) to which the user attaches is located in a trust domain of the SP, wherein the trust domain of the SP is called as a first trust domain; in the case that the IDP to which the user attaches is not located in the first trust domain, by the SP, inquiring of IDPs which are in the first trust domain about the IDP to which the user attaches; determining a first IDP of the IDPs is not only in the first trust domain, but also in a second trust domain where the IDP to which the user attaches is located, so as to determine that the first IDP has information of the IDP to which the user attaches; sending, by the first IDP, the information of the IDP to which the user attaches to the SP; adding, by the SP, the IDP to which the user attaches to a temporary trust list to establish a trust for the IDP to which the user attaches, so that the SP, the user, and the IDP to which the user attaches can communicate directly without via any intermediate IDPs; sending, by the SP, an identity authentication request to the user; requesting, by the user, the IDP to which the user attaches to perform identity authentication on the user; sending, by the IDP to which the user attaches, the user identity authentication information to the SP; and performing, by the SP, authorization on the user according to the user's identity authentication information, so as to determine whether to provide a service to the user.