Patent ID: 7415610
Filing Date: 2008-08-19
Classification: G06F,G06Q,H04L

Abstract:
1. A method comprising: receiving, from a network entity that controls access to stored information associated with a user, by a service provider, a network address associated with the stored information and a first message component, wherein the first message component is encrypted with a first crypto-key associated with the network entity and can be decrypted by the network entity, wherein the first message component includes user identity information and integrity information, wherein the user identity information is associated with the stored information and the integrity information is associated with the user identity information; receiving, from an access portal associated with the user, by the service provider, a request for information enabling access to the stored information; responsive to the request, generating, by the service provider, a response, wherein the response includes the network address and the first message component; and transmitting, to the access portal, by the service provider, the generated response, wherein the response is extensible by the access portal to include a second message component and a third message component, wherein the second message component is encrypted with a second crypto-key associated with the access portal, and wherein the extended response is usable to obtain access to the stored information; wherein the third message component is encrypted with a third crypto-key associated with the service provider, and wherein the third crypto-key can be decrypted by the network entity that controls access to the stored information associated with the user; wherein content of the third message component includes first relationship information indicative of a relationship between the service provider and the network entity, wherein the first relationship information indicates that the user identity information and the integrity information were received by the service provider from the network entity; and wherein the content of the third message component includes second relationship information indicative of a relationship between the service provider and the access portal, wherein the second relationship information indicates that the user identity information and the integrity information were transmitted by the service provider to the access portal.