(19) (51) Int Cl.: G06F21/20 (2006.01) (86) International application number:  PCT/IB2003/001172 (87) International publication number:  WO 2003/091861 (06.11.2003 Gazette 2003/45) (22) Date of filing:  26.03.2003 (21) Application number:  03747178.6 (45) Date of publication and mention  of the grant of the patent:  09.05.2012 Bulletin 2012/19 (12) EUROPEAN PATENT SPECIFICATION (11) EP 1 499 940 B1 (54) EFFICIENT BROWSER-BASED IDENTITY MANAGEMENT PROVIDING PERSONAL CONTROL  AND ANONYMITY EFFIZIENTE BROWSER-GESTÜTZTE IDENTITÄTSVERWALTUNG FR PERSÖNLICHE  KONTOLLE UND ANONYMITÄT SYSTEME DE GESTION EFFICACE DE L’IDENTITE AU MOYEN D’UN NAVIGATEUR,  FOURNISSANT UN CONTROLE PERSONNEL ET L’ANONYMAT (56) References cited:  WO-A-01/18684 WO-A-99/56194 • "Binding and Profiles for the OASIS Security  Assertion Markup Language (SAML)"  WWW.OASIS-OPEN.ORG, [Online] 15 February  2002 (2002-02-15), XP002271983 Retrieved from  the Internet: <URL:http://www.oasis-open.org/ committees/ security/docs/draft-sstc-bindings- model-11 .pdf> [retrieved on 2004-03-01] • MARLENA ERDOS AND SCOTT CANTOR:  "Shiboleth-Architecture DRAFT v04" HTTP:// SHIBBOLETH.INTERNET2.EDU, [Online] 21  November 2001 (2001-11-21), XP002271984  Retrieved from the Internet: <URL:http:// shibboleth.internet2.edu/docs/ draft-internet2- shibboleth-arch-v04.pdf> [retrieved on  2004-03-01] (84) Designated Contracting States:  AT BE BG CH CY CZ DE DK EE ES FI FR GB GR  HU IE IT LI LU MC NL PT RO SE SI SK TR (30) Priority: 26.04.2002 EP 02009568 (43) Date of publication of application:  26.01.2005 Bulletin 2005/04 (73) Proprietor:  International Business Machines  Corporation Armonk, NY 10504 (US) (72) Inventors:  • PFITZMANN, Birgit, M, CH-8833 Samstagern (CH) • WAIDNER, Michael CH-8804 AU (CH) (74) Representative:  Meyer, Michael Josef IBM Research GmbH  Zurich Research Laboratory  Säumerstrasse 4 8803 Rüschlikon (CH) • KORMANN D P ET AL: "Risks of the Passport  single signon protocol" COMPUTER  NETWORKS, ELSEVIER SCIENCE PUBLISHERS  B.V., AMSTERDAM, NL, vol. 33, no.1-6, June 2000  (2000-06), pages 51-58, XP004304758 ISSN:  1389-1286 • NEUMAN B C ET AL: "KERBEROS: AN  AUTHENTICATION SERVICE FOR COMPUTER  NETWORKS" IEEE COMMUNICATIONS  MAGAZINE, IEEE SERVICE CENTER.  PISCATAWAY, N.J,US, vol. 32, no. 9, 1September  1994 (1994-09-01), pages 33-38, XP000476553  ISSN: 0163-6804 Note: Within nine months of the publication of the mention of the grant of the European patent in the European Patent Bulletin, any person may give notice to the European Patent Office of opposition to that patent, in accordance with the Implementing Regulations. Notice of opposition shall not be deemed to have been filed until the opposition fee has been paid. (Art. 99(1) European Patent Convention). Printed by Jouve, 75001 PARIS (FR) EP 499 940 B1