Techniques for dynamically establishing and managing authentication and trust relationships

摘要

Computer-implemented techniques are provided for dynamically establishing and managing authentication and trust relationships. A computer networked identity service (330,402) acquires (120) and evaluates contracts associated with relationships between principals (310,320,420). The contracts permit the identity service to assemble authentication information, aggregated attributes, and aggregated policies which will drive and define the various relationships. That assembled information is consumed (170) by the principals during interactions with one another and constrains those interactions. In some embodiments, the constraints are dynamically modified (140) during on-going interactions between the principals.