Patent ID: 7444666
Filing Date: 2008-10-28
Classification: H04L

Abstract:
1. A method of multi-domain authorisation/authentication on a computer network comprises: a user making a request to a policy enforcement point (PEP) of a computer for access to a service on the computer of a first domain which requires authorisation for access from a second domain; providing a location address for a meta policy decision point (MPDP) maintaining the user's authorisation and/or authentication information provided from different issuing authorities, at which address authorisation and/or authentication information and/or further personal information of the user has been pre-stored at a remote location; a policy decision point (PDP) of the service on the computer network then verifying the authorisation/authentication information received from the MPDP or seeking authorisation/authentication from an address received from the MPDP, the address provided in the pre-stored authorisation/authentication/further personal information; and the user being given access by the PEP to the information or the service requested, if the request is accepted, wherein the MPDP is hosted by a party independent from the user.