| 摘要 |
<p>The invention provides a method of determining an attribute of a subject 10, for example, to provide authentication of the subject 10. An identity provider 200 establishes a first shared secret with a subject 10, i.e. via a communication device 100 of the subject 10, and the identity provider 200 determines whether the first shared secret is associated with an identifier of an entity at a source of authority 300, based on information received at the identity provider 200 from the source of authority 300. The source of authority 300 creates an association between the first shared secret received from the subject 10 and the identifier of the entity, and the source of authority 300 sends to the identity provider 200 information indicating that the first shared secret is associated with the identifier of the entity at the source of authority 300. The invention may be used to authenticate that a subject 10 represents a company, or is authorised to act on behalf of the company, or that the subject 10 is a registered, chartered or certified person, such as a lawyer or doctor.</p> |
