Preference editor to facilitate privacy controls over user identities

摘要

A privacy preference editor enables a user to institute privacy preferences relative to user identity information on a card-based and category-based basis. An identity selector furnishes information cards representative of user identities. The editor allows the user to set a privacy preference for each information card. Any proposed disclosure of an information card invokes its corresponding privacy preference. In turn, an agent engine evaluates the invoked privacy preference against the privacy policy of a relying party seeking the card information. The editor also permits the user to create information categories, populate the categories with a group of relevant user identity attributes, and set a privacy preference to the category. In this way, a category-specific privacy preference can be invoked by using the attribute required by the security policy as an index to the appropriate categorized group where the required attribute resides.

主权项

1. A system, comprising:
a memory; a processing device, coupled with the memory to execute: an identity selector configured to provide a selection of at least one user identity from a plurality of user identities for a single user, each user identity having a respective plurality of user identity attributes; and a privacy preference editor; the privacy preference editor configured to receive at least one input indicative of a user selection that specifies a privacy preference feature relative to one or more of the selected user identities, and to generate at least one privacy preference relative to the one or more of the selected user identities using the at least one input, wherein the privacy preference indicates how the privacy of at least one user attribute of the one or more selected user identities is treated when the at least one user attribute is provided to a third party; wherein the privacy preference editor is configured to associate the at least one privacy preference to at least one information card each defining a collection of attributes; wherein the at least one information card is related to the one or more of the selected user identities; and wherein the identity selector retrieves and determines which of the at least one information card satisfy identity requirements of a security policy, enables the user to select one of the at least one information card determined to satisfy the security policy, and requests an issuance of a security token from an identity provider, in reference to the at least one information card selected by the user.