Network identify management system and method

Abstract

Users of Internet services (e.g., SKYPE messaging service, GOOGLETALK messaging service, AOL INSTANT MESSENGER messaging service, and MICROSOFT MESSENGER messaging service) that are initially identified using separate identifiers that may be associated with respective service providers (e.g., email addresses) can manage network identities using a single unified set of account information managed by a registry service. The registry authenticates the user's request(s) to bind a service provider identity to his or her personal registry user record by presenting a random challenge to the user which the registry must then receive back from the service provider corresponding to the identity being added. Later, the registry may authenticate itself to service providers using information received from a service provider application as the service provider application authenticates itself to the service provider.

1 . A method of managing network identities, comprising:
 receiving a request at an identity registry to add a network identity to a user record, wherein the network identity includes at least an identifier used to identify the network identity to a service provider;   sending, to a requester of the request, a random challenge; and   receiving the random challenge from the service provider after the requester has forwarded the challenge to the service provider.   
     
     
         2 . The method as claimed in  claim 1 , wherein the random challenge comprises a random number. 
     
     
         3 . The method as claimed in  claim 1 , wherein the random challenge comprises a random text string. 
     
     
         4 . The method as claimed in  claim 1 , wherein the random challenge comprises a graphic image of at least one of a random number and a random text string, and wherein the random challenge is received from the service provider as a corresponding one of a random number and a random text string not in the form of a graphic image. 
     
     
         5 . The method as claimed in  claim 1 , wherein the service provider comprises a provider of instant messaging services. 
     
     
         6 . The method as claimed in  claim 1 , wherein the service provider comprises a provider of voice-over-IP services. 
     
     
         7 . The method as claimed in  claim 1 , wherein the service provider comprises a Local Exchange Carrier. 
     
     
         8 . The method as claimed in  claim 1 , wherein receiving the random challenge from the service provider comprises:
 establishing via the service provider a connection between a service provider application and the identity registry; and   receiving the random challenge via the established connection.   
     
     
         9 . The method as claimed in  claim 8 , wherein the service provider application requests the service provider to establish the connection. 
     
     
         10 . The method as claimed in  claim 8 , wherein the registry requests the service provider to establish the connection. 
     
     
         11 . The method as claimed in  claim 8 , wherein the connection comprises a telephone connection. 
     
     
         12 . The method as claimed in  claim 8 , wherein the connection comprises a text messaging connection. 
     
     
         13 . The method as claimed in  claim 1 , wherein an advertising service that is operatively coupled to the identity registry sends at least one advertisement to one of the network identities in such user record. 
     
     
         14 . A method of centrally managing presence information for plural service providers, comprising:
 receiving log in information from a service provider application at an identity registry;   connecting to a service provider corresponding to the log in information received from the service provider application;   identifying to the service provider that the registry is to act as an information proxy; and   logging into the service provider using the log in information received from the service provider application.   
     
     
         15 . The method as claimed in  claim 14 , further comprising:
 receiving presence information from the service provider; and   exposing the presence information to other service providers.   
     
     
         16 . The method as claimed in  claim 14 , further comprising sending an advertisement from an advertising service that is coupled to the registry to the user of the service provider application. 
     
     
         17 . The method as claimed in  claim 14 , wherein the step of connecting to the service provider follows the step of receiving log in information from a service provider application.