CA2473793C - Systeme, procede et appareil pour services d'identification unique federes - Google Patents

Systeme, procede et appareil pour services d'identification unique federes Download PDF

Info

Publication number
CA2473793C
CA2473793C CA2473793A CA2473793A CA2473793C CA 2473793 C CA2473793 C CA 2473793C CA 2473793 A CA2473793 A CA 2473793A CA 2473793 A CA2473793 A CA 2473793A CA 2473793 C CA2473793 C CA 2473793C
Authority
CA
Canada
Prior art keywords
user
authentication
mobile network
provider
service provider
Prior art date
Legal status (The legal status is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the status listed.)
Expired - Lifetime
Application number
CA2473793A
Other languages
English (en)
Other versions
CA2473793A1 (fr
Inventor
Luis Barriga
Avelina Pardo Blazquez
John Michael Walker
Jesus-Angel De Gregorio
Current Assignee (The listed assignees may be inaccurate. Google has not performed a legal analysis and makes no representation or warranty as to the accuracy of the list.)
Telefonaktiebolaget LM Ericsson AB
Original Assignee
Telefonaktiebolaget LM Ericsson AB
Priority date (The priority date is an assumption and is not a legal conclusion. Google has not performed a legal analysis and makes no representation as to the accuracy of the date listed.)
Filing date
Publication date
Priority claimed from US10/176,471 external-priority patent/US7221935B2/en
Application filed by Telefonaktiebolaget LM Ericsson AB filed Critical Telefonaktiebolaget LM Ericsson AB
Publication of CA2473793A1 publication Critical patent/CA2473793A1/fr
Application granted granted Critical
Publication of CA2473793C publication Critical patent/CA2473793C/fr
Anticipated expiration legal-status Critical
Expired - Lifetime legal-status Critical Current

Links

Classifications

    • G—PHYSICS
    • G06—COMPUTING; CALCULATING OR COUNTING
    • G06F—ELECTRIC DIGITAL DATA PROCESSING
    • G06F21/00—Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
    • G06F21/30—Authentication, i.e. establishing the identity or authorisation of security principals
    • G06F21/31—User authentication
    • G06F21/41—User authentication where a single sign-on provides access to a plurality of computers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/04—Protocols specially adapted for terminals or networks with limited capabilities; specially adapted for terminal portability
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0815—Network architectures or network communication protocols for network security for authentication of entities providing single-sign-on or federations
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/08—Network architectures or network communication protocols for network security for authentication of entities
    • H04L63/0884—Network architectures or network communication protocols for network security for authentication of entities by delegation of authentication, e.g. a proxy authenticates an entity to be authenticated on behalf of this entity vis-à-vis an authentication entity
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/01—Protocols
    • H04L67/10—Protocols in which an application is distributed across nodes in the network
    • H04L67/1001—Protocols in which an application is distributed across nodes in the network for accessing one among a plurality of replicated servers
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L67/00—Network arrangements or protocols for supporting network services or applications
    • H04L67/50—Network services
    • H04L67/51—Discovery or management thereof, e.g. service location protocol [SLP] or web services
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04W—WIRELESS COMMUNICATION NETWORKS
    • H04W12/00—Security arrangements; Authentication; Protecting privacy or anonymity
    • H04W12/06—Authentication
    • H04W12/069—Authentication using certificates or pre-shared keys
    • H—ELECTRICITY
    • H04—ELECTRIC COMMUNICATION TECHNIQUE
    • H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
    • H04L63/00—Network architectures or network communication protocols for network security
    • H04L63/04—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks
    • H04L63/0407—Network architectures or network communication protocols for network security for providing a confidential data exchange among entities communicating through data packet networks wherein the identity of one or more communicating identities is hidden
    • H04L63/0421—Anonymous communication, i.e. the party's identifiers are hidden from the other party or parties, e.g. using an anonymizer

Landscapes

  • Engineering & Computer Science (AREA)
  • Computer Networks & Wireless Communication (AREA)
  • Signal Processing (AREA)
  • Computer Security & Cryptography (AREA)
  • Computer Hardware Design (AREA)
  • General Engineering & Computer Science (AREA)
  • Theoretical Computer Science (AREA)
  • Computing Systems (AREA)
  • Software Systems (AREA)
  • Physics & Mathematics (AREA)
  • General Physics & Mathematics (AREA)
  • Mobile Radio Communication Systems (AREA)
  • Management, Administration, Business Operations System, And Electronic Commerce (AREA)
  • Telephonic Communication Services (AREA)

Abstract

L'avènement de services Web nouveaux et sophistiqués fournis par des fournisseurs de services à des utilisateur, lesquels services exigent individuellement l'authentification d'utilisateurs et l'autorisation d'accès, a fait naître le besoin d'un nouveau service facilitant cette authentification et cet accès, à savoir un service d'identification unique (SSO - Single Sign-On). Cette identification unique repose sur le principe de base selon lequel des utilisateurs sont authentifiés une seule fois à un niveau particulier puis accèdent à tous les services auxquels ils sont abonnés en validant ce niveau d'authentification. La présente invention concerne un système, un procédé et un appareil, dans lesquels une fédération cellulaire d'opérateurs de réseaux mobiles devient une autorité d'authentification d'identification unique pour les abonnés de cette fédération accédant à des fournisseurs de services ayant un accord avec un opérateur de réseau mobile de cette fédération. En accord avec cette invention, des opérateurs de réseaux mobiles peuvent utiliser leur relation de confiance opérateur-abonné, afin d'agir en tant qu'autorité d'authentification d'identification unique pour les abonnés accédant à des fournisseurs de service dans un domaine de service autre que celui des réseaux mobiles.
CA2473793A 2002-02-28 2003-02-28 Systeme, procede et appareil pour services d'identification unique federes Expired - Lifetime CA2473793C (fr)

Applications Claiming Priority (7)

Application Number Priority Date Filing Date Title
US36138202P 2002-02-28 2002-02-28
US60/361,382 2002-02-28
US37705902P 2002-05-01 2002-05-01
US60/377,059 2002-05-01
US10/176,471 US7221935B2 (en) 2002-02-28 2002-06-19 System, method and apparatus for federated single sign-on services
US10/176,471 2002-06-19
PCT/SE2003/000342 WO2003073783A1 (fr) 2002-02-28 2003-02-28 Systeme, procede et appareil pour services d'identification unique federes

Publications (2)

Publication Number Publication Date
CA2473793A1 CA2473793A1 (fr) 2003-09-04
CA2473793C true CA2473793C (fr) 2014-08-26

Family

ID=27761357

Family Applications (1)

Application Number Title Priority Date Filing Date
CA2473793A Expired - Lifetime CA2473793C (fr) 2002-02-28 2003-02-28 Systeme, procede et appareil pour services d'identification unique federes

Country Status (9)

Country Link
JP (1) JP4303130B2 (fr)
CN (1) CN100592827C (fr)
AU (1) AU2003217103A1 (fr)
CA (1) CA2473793C (fr)
DE (1) DE10392283T5 (fr)
ES (1) ES2281228B2 (fr)
GB (1) GB2401509B (fr)
SE (1) SE527706C2 (fr)
WO (1) WO2003073783A1 (fr)

Families Citing this family (78)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US7290288B2 (en) 1997-06-11 2007-10-30 Prism Technologies, L.L.C. Method and system for controlling access, by an authentication server, to protected computer resources provided via an internet protocol network
US8713623B2 (en) 2001-09-20 2014-04-29 Time Warner Cable Enterprises, LLC Technique for effectively providing program material in a cable television system
US7444519B2 (en) 2003-09-23 2008-10-28 Computer Associates Think, Inc. Access control for federated identities
AU2003265197A1 (en) * 2003-09-30 2005-04-14 Telefonaktiebolaget Lm Ericsson (Publ) Means and method for generating a unique user's identity for use between different domains
US8312267B2 (en) 2004-07-20 2012-11-13 Time Warner Cable Inc. Technique for securely communicating programming content
US8266429B2 (en) 2004-07-20 2012-09-11 Time Warner Cable, Inc. Technique for securely communicating and storing programming material in a trusted domain
GB0423301D0 (en) 2004-10-20 2004-11-24 Fujitsu Ltd User authorization for services in a wireless communications network
JP4598494B2 (ja) * 2004-11-26 2010-12-15 富士通株式会社 利用者仮識別子を用いるネットワークサービスシステム
US9723267B2 (en) 2004-12-15 2017-08-01 Time Warner Cable Enterprises Llc Method and apparatus for wideband distribution of content
JP4543322B2 (ja) * 2005-03-14 2010-09-15 日本電気株式会社 仲介サーバ、第２の認証サーバ、これらの動作方法、及び通信システム
JP2006260321A (ja) * 2005-03-18 2006-09-28 Nec Corp サービス提供システムおよびそのユーザ認証方法
US20070022459A1 (en) 2005-07-20 2007-01-25 Gaebel Thomas M Jr Method and apparatus for boundary-based network operation
JP4670598B2 (ja) * 2005-11-04 2011-04-13 日本電気株式会社 ネットワークシステム、プロキシサーバ、セッション管理方法、及びプログラム
US9251323B2 (en) * 2005-11-24 2016-02-02 International Business Machines Corporation Secure access to a plurality of systems of a distributed computer system by entering passwords
CN1852094B (zh) 2005-12-13 2010-09-29 华为技术有限公司 网络业务应用账户的保护方法和系统
US9386327B2 (en) 2006-05-24 2016-07-05 Time Warner Cable Enterprises Llc Secondary content insertion apparatus and methods
US8280982B2 (en) 2006-05-24 2012-10-02 Time Warner Cable Inc. Personal content server apparatus and methods
US7865173B2 (en) * 2006-07-10 2011-01-04 Telefonaktiebolaget L M Ericsson (Publ) Method and arrangement for authentication procedures in a communication network
JP4611946B2 (ja) * 2006-08-10 2011-01-12 日本電信電話株式会社 利用者回線認証システム、利用者回線認証方法および利用者回線認証プログラム
US8520850B2 (en) 2006-10-20 2013-08-27 Time Warner Cable Enterprises Llc Downloadable security and protection methods and apparatus
US8732854B2 (en) 2006-11-01 2014-05-20 Time Warner Cable Enterprises Llc Methods and apparatus for premises content distribution
EP2098038B1 (fr) * 2006-12-28 2017-06-21 Telefonaktiebolaget LM Ericsson (publ) Procédé et agencement pour l'intégration de différentes infrastructures d'authentification
US8621540B2 (en) 2007-01-24 2013-12-31 Time Warner Cable Enterprises Llc Apparatus and methods for provisioning in a download-enabled system
US8181206B2 (en) 2007-02-28 2012-05-15 Time Warner Cable Inc. Personal content server apparatus and methods
US8695074B2 (en) * 2007-04-26 2014-04-08 Microsoft Corporation Pre-authenticated calling for voice applications
ITTO20070853A1 (it) * 2007-11-26 2009-05-27 Csp Innovazione Nelle Ict Scar Metodo di autenticazione per utenti appartenenti ad organizzazioni diverse senza duplicazione delle credenziali
WO2010000298A1 (fr) * 2008-06-30 2010-01-07 Nokia Siemens Networks Oy Appareil, procédé et programme pour une authentification intégrée
US9357247B2 (en) 2008-11-24 2016-05-31 Time Warner Cable Enterprises Llc Apparatus and methods for content delivery and message exchange across multiple content delivery networks
US11076189B2 (en) 2009-03-30 2021-07-27 Time Warner Cable Enterprises Llc Personal media channel apparatus and methods
US9215423B2 (en) 2009-03-30 2015-12-15 Time Warner Cable Enterprises Llc Recommendation engine apparatus and methods
US9602864B2 (en) 2009-06-08 2017-03-21 Time Warner Cable Enterprises Llc Media bridge apparatus and methods
US9866609B2 (en) 2009-06-08 2018-01-09 Time Warner Cable Enterprises Llc Methods and apparatus for premises content distribution
CN101645021B (zh) * 2009-06-18 2012-12-12 广东金宇恒科技有限公司 Java应用服务器下多系统的单点登录整合方法
US9237381B2 (en) 2009-08-06 2016-01-12 Time Warner Cable Enterprises Llc Methods and apparatus for local channel insertion in an all-digital content distribution network
US20120198539A1 (en) * 2009-08-31 2012-08-02 China Mobile Communications Corporation Service Access Method, System and Device Based on WLAN Access Authentication
US8396055B2 (en) 2009-10-20 2013-03-12 Time Warner Cable Inc. Methods and apparatus for enabling media functionality in a content-based network
US10264029B2 (en) 2009-10-30 2019-04-16 Time Warner Cable Enterprises Llc Methods and apparatus for packetized content delivery over a content delivery network
US9635421B2 (en) 2009-11-11 2017-04-25 Time Warner Cable Enterprises Llc Methods and apparatus for audience data collection and analysis in a content delivery network
US9519728B2 (en) 2009-12-04 2016-12-13 Time Warner Cable Enterprises Llc Apparatus and methods for monitoring and optimizing delivery of content in a network
US9342661B2 (en) 2010-03-02 2016-05-17 Time Warner Cable Enterprises Llc Apparatus and methods for rights-managed content and data delivery
US9300445B2 (en) 2010-05-27 2016-03-29 Time Warner Cable Enterprise LLC Digital domain content processing and distribution apparatus and methods
US9560036B2 (en) 2010-07-08 2017-01-31 International Business Machines Corporation Cross-protocol federated single sign-on (F-SSO) for cloud enablement
US9906838B2 (en) 2010-07-12 2018-02-27 Time Warner Cable Enterprises Llc Apparatus and methods for content delivery and message exchange across multiple content delivery networks
US8997136B2 (en) 2010-07-22 2015-03-31 Time Warner Cable Enterprises Llc Apparatus and methods for packetized content delivery over a bandwidth-efficient network
JP5817728B2 (ja) 2010-08-25 2015-11-18 日本電気株式会社 条件マッチングシステム、条件マッチング連係装置および条件マッチング処理方法
US9185341B2 (en) 2010-09-03 2015-11-10 Time Warner Cable Enterprises Llc Digital domain content processing and distribution apparatus and methods
US8930979B2 (en) 2010-11-11 2015-01-06 Time Warner Cable Enterprises Llc Apparatus and methods for identifying and characterizing latency in a content delivery network
US10148623B2 (en) 2010-11-12 2018-12-04 Time Warner Cable Enterprises Llc Apparatus and methods ensuring data privacy in a content distribution network
EP2521329B1 (fr) * 2011-05-04 2013-07-10 Alcatel Lucent Serveur, système, procédé, programme informatique et produit de programme informatique pour l'accès à un serveur dans un réseau informatique
US9065816B2 (en) * 2011-06-15 2015-06-23 Oracle International Corporation Systems and methods of integrating openID with a telecommunications network
US8943571B2 (en) * 2011-10-04 2015-01-27 Qualcomm Incorporated Method and apparatus for protecting a single sign-on domain from credential leakage
EP2792120A4 (fr) 2011-12-12 2015-10-21 Nokia Technologies Oy Procédé et appareil pour la réalisation de comptes de services fédérés
JP4995995B2 (ja) * 2012-03-06 2012-08-08 テレフオンアクチーボラゲット エル エム エリクソン（パブル） アイデンティティネットワークにおけるプライバシー管理のための方法、そのための物理エンティティおよびコンピュータプログラム
US10176335B2 (en) 2012-03-20 2019-01-08 Microsoft Technology Licensing, Llc Identity services for organizations transparently hosted in the cloud
US9467723B2 (en) 2012-04-04 2016-10-11 Time Warner Cable Enterprises Llc Apparatus and methods for automated highlight reel creation in a content delivery network
US20140082645A1 (en) 2012-09-14 2014-03-20 Peter Stern Apparatus and methods for providing enhanced or interactive features
US9565472B2 (en) 2012-12-10 2017-02-07 Time Warner Cable Enterprises Llc Apparatus and methods for content transfer protection
US20140282786A1 (en) 2013-03-12 2014-09-18 Time Warner Cable Enterprises Llc Methods and apparatus for providing and uploading content to personalized network storage
US9066153B2 (en) 2013-03-15 2015-06-23 Time Warner Cable Enterprises Llc Apparatus and methods for multicast delivery of content in a content delivery network
US10368255B2 (en) 2017-07-25 2019-07-30 Time Warner Cable Enterprises Llc Methods and apparatus for client-based dynamic control of connections to co-existing radio access networks
US9313568B2 (en) 2013-07-23 2016-04-12 Chicago Custom Acoustics, Inc. Custom earphone with dome in the canal
US9621940B2 (en) 2014-05-29 2017-04-11 Time Warner Cable Enterprises Llc Apparatus and methods for recording, accessing, and delivering packetized content
US11540148B2 (en) 2014-06-11 2022-12-27 Time Warner Cable Enterprises Llc Methods and apparatus for access point location
US9935833B2 (en) 2014-11-05 2018-04-03 Time Warner Cable Enterprises Llc Methods and apparatus for determining an optimized wireless interface installation configuration
US10116676B2 (en) 2015-02-13 2018-10-30 Time Warner Cable Enterprises Llc Apparatus and methods for data collection, analysis and service modification based on online activity
SE1551176A1 (en) * 2015-09-14 2017-03-15 Identitrade Ab Method and system for authenticating a user
US10749854B2 (en) 2015-11-12 2020-08-18 Microsoft Technology Licensing, Llc Single sign-on identity management between local and remote systems
US9986578B2 (en) 2015-12-04 2018-05-29 Time Warner Cable Enterprises Llc Apparatus and methods for selective data network access
US9918345B2 (en) 2016-01-20 2018-03-13 Time Warner Cable Enterprises Llc Apparatus and method for wireless network services in moving vehicles
US10404758B2 (en) 2016-02-26 2019-09-03 Time Warner Cable Enterprises Llc Apparatus and methods for centralized message exchange in a user premises device
US10492034B2 (en) 2016-03-07 2019-11-26 Time Warner Cable Enterprises Llc Apparatus and methods for dynamic open-access networks
US10164858B2 (en) 2016-06-15 2018-12-25 Time Warner Cable Enterprises Llc Apparatus and methods for monitoring and diagnosing a wireless network
US10645547B2 (en) 2017-06-02 2020-05-05 Charter Communications Operating, Llc Apparatus and methods for providing wireless service in a venue
US10638361B2 (en) 2017-06-06 2020-04-28 Charter Communications Operating, Llc Methods and apparatus for dynamic control of connections to co-existing radio access networks
EP3522511A1 (fr) * 2018-02-05 2019-08-07 Schweizerische Bundesbahnen SBB Procédé de communication et système de communication pour la taxation
US11477217B2 (en) 2018-09-18 2022-10-18 Cyral Inc. Intruder detection for a network
US11757880B2 (en) * 2018-09-18 2023-09-12 Cyral Inc. Multifactor authentication at a data source
US11877218B1 (en) 2021-07-13 2024-01-16 T-Mobile Usa, Inc. Multi-factor authentication using biometric and subscriber data systems and methods

Family Cites Families (4)

* Cited by examiner, † Cited by third party
Publication number Priority date Publication date Assignee Title
US6430276B1 (en) * 1998-11-18 2002-08-06 Hewlett-Packard Company Telecommunications system and method providing generic network access service
WO2001072009A2 (fr) * 2000-03-17 2001-09-27 At & T Corp. Mecanisme d'authentification base sur le web et possedant une procedure d'ouverture unique
GB0100309D0 (en) * 2001-01-05 2001-02-14 Nokia Networks Oy Provision of services in a communications system
EP1259084A1 (fr) * 2001-05-17 2002-11-20 Libertel Netwerk B.V. Système de réseau de raccordement d'usagers à des fournisseurs de service

Also Published As

Publication number Publication date
SE0402099D0 (sv) 2004-08-26
WO2003073783A1 (fr) 2003-09-04
GB2401509B (en) 2006-02-01
AU2003217103A1 (en) 2003-09-09
JP4303130B2 (ja) 2009-07-29
ES2281228A1 (es) 2007-09-16
GB2401509A (en) 2004-11-10
SE527706C2 (sv) 2006-05-16
JP2005519501A (ja) 2005-06-30
CA2473793A1 (fr) 2003-09-04
DE10392283T5 (de) 2005-04-14
CN100592827C (zh) 2010-02-24
CN1640175A (zh) 2005-07-13
GB0415391D0 (en) 2004-08-11
ES2281228B2 (es) 2008-07-16
SE0402099L (en) 2004-08-26

Similar Documents

Publication Publication Date Title
CA2473793C (fr) Systeme, procede et appareil pour services d'identification unique federes
US7221935B2 (en) System, method and apparatus for federated single sign-on services
US8572708B2 (en) Method and arrangement for integration of different authentication infrastructures
EP2039050B1 (fr) Procédé et dispositif pour procédures d'authentification dans un réseau de communication
US7860883B2 (en) Method and system for distributed retrieval of data objects within multi-protocol profiles in federated environments
KR100644616B1 (ko) 마크업 랭귀지 기반의 단일인증 방법 및 이를 위한 시스템
CN112822675B (zh) 面向MEC环境的基于OAuth2.0的单点登录机制
US20140237250A1 (en) Registration and Network Access Control
US20080072301A1 (en) System And Method For Managing User Authentication And Service Authorization To Achieve Single-Sign-On To Access Multiple Network Interfaces
US20040002878A1 (en) Method and system for user-determined authentication in a federated environment
WO2009129753A1 (fr) Procédé et appareil pour améliorer la sécurité de l'authentification d'identité de réseau
US20060020791A1 (en) Entity for use in a generic authentication architecture
CN113660284B (zh) 一种基于票据的分布式认证方法
WO2012028168A1 (fr) Passerelle de gestion d'identité
JP5920891B2 (ja) 通信サービス認証・接続システム及びその方法
Lutz et al. Harmonizing service and network provisioning for federative access in a mobile environment
CN116996232A (zh) 一种基于端口复用与路由转发的统一数字身份认证方法
HOLTMANNS et al. Identity Management in Mobile Communication Systems
Pale et al. Some aspects of authentification for distributed project teams

Legal Events

Date Code Title Description
EEER Examination request
MKEX Expiry

Effective date: 20230228