Technological configuration (outline)

This software achieves information distribution between users and the three types of provider websites described below (<1> - <3>) by implementing the latest architectural specification from the Liberty Alliance Project. An "attribute-provider" site incorporates a mechanism that implements policy on the sharing of user information.

Technological configuration (outline)

<1>  Service-provider sites (SP1, SP2) provide the actual services (e.g., Net shopping, e-commerce) to Internet users.
<2>  The identification-provider site (IdP) identifies Internet users and gives the results of identification to service providers. Links between the service- and identification-provider sites provide the single sign-on function for users. The identification provider also mediates between service and attribute providers, finding attribute providers that hold the user information required by service providers. This site limits the set of sites that becomes accessible to a user through the single-sign-on function and ensures the basic levels of security and privacy stipulated by the Liberty Alliance by restricting the availability of attribute-provider sites to service-provider sites.
<3>  The attribute-provider site (AP) records and manages various user information, and provides personal information on users to service providers within the bounds of user consent.
<4>  The policy-implementation mechanism for the sharing of user information on the attribute-provider site controls the provision of user information to service-provider sites. These policies are flexibly adjusted on a per-user basis, raising the level of privacy.

Note 1.  The elements of this configuration are theoretical; individual providers might handle multiple functions.
Note 2.  The Liberty Alliance stipulates regulations for the transfer of information between users and Web-sites operated by providers, and for the distribution of information among Web-sites.


Copyright (c) 2003 Nippon telegraph and telephone corporation