Privacy from cloud operators

摘要

Aspects of the subject matter described herein relate to identity technology. In aspects, even though a cloud operator may control one or all of the entities with which a user device interacts, the employees and computers controlled by the cloud operator may still have insufficient data to determine a natural identity of the user based on interactions of the user device with the cloud operator's computers. Privacy boundaries on the user device control transmission of natural identity information to other entities such that, without user consent, computers outside of the user device have insufficient data singly or combined to determine a natural identity of the user.

主权项

1. A method implemented at least in part by a computer, the method comprising:
at a communications interface of a device connected to the Internet, receiving a service request for a service of a relying party, the device controlled by a cloud operator for benefit of the relying party; and in response to the service request, sending, from the device, a message that includes redirection data, the redirection data indicating a source from which to obtain code for a user agent, the code, when executed, erecting a privacy boundary to control transmission of identity information, the privacy boundary preventing identity information sufficient to identify a natural identity of a user from passing from the user agent to the relying party without user consent.