Patent ID: 7565356
Filing Date: 2009-07-21
Classification: H04L,Y10S

Abstract:
1. A machine-implemented method, comprising: storing, in a repository, a first association between a particular user characteristic and a first user; storing, in the repository, a second association between the particular user characteristic, which is associated with the first user, and a second user that is separate from the first user; after storing the associations between the particular user characteristic and the first and second users, storing, in the repository, a third association between (a) first web service provider (WSP) access information, which indicates how to access a first WSP, and (b) the particular user characteristic; a directory service provider (DSP) receiving, from a second WSP that is separate from the first WSP, a first request for access information for WSP instances, wherein the first request indicates first identifying information that is associated with the first user; in response to the DSP receiving the first request, the DSP searching the repository for user characteristics that are associated with the first user; the DSP determining, from the repository-stored first association between the particular user characteristic and the first user, that the first user is associated with the particular user characteristic; in response to determining that the first user is associated with the particular user characteristic, the DSP searching the repository for WSP access information that is associated with the particular user characteristic; the DSP determining, from the repository-stored third association between the particular user characteristic and the first WSP access information, that the particular user characteristic is associated with the first WSP access information; in response to a determination that the particular user characteristic is associated with the first WSP access information, the DSP sending the first WSP access information to the second WSP in a response to the first request from the second WSP; wherein the second WSP uses the first WSP access information to send, to a Universal Resource Identifier (URI) that is specified in the first WSP access information, a request for information that the first WSP maintains regarding the first user; instantiating an instance of a template class, wherein an attribute of the instance of the template class indicates the first WSP access information; establishing an association between the particular user characteristic and the instance of the template class; determining that the particular user characteristic is associated with a particular credential type; in response to a determination that the particular user characteristic is associated with the particular credential type, generating a credential of the particular credential type; sending the credential in the response to the first request; determining that the particular user characteristic is associated with a particular function; in response to a determination that the particular user characteristic is associated with the particular function, using the particular function to generate second identifying information; and sending the second identifying information in the response to the first request.