Abstract: A system and method for dynamic rendering of information cards is provided. A card selector uses policies and rendering content to modify the presentation of information cards in the card selector. The policies and rendering content can be obtained from identity providers and relying parties. The rendering content can be obtained each time the card selector is invoked, just prior to rendering the information cards, or at other times specified in the policy. The rendering content can be displayed in a display area of the information card or in a content canvas outside the display area of the information card.

Abstract: A relying party can have a security policy. The security policy can include claims that are categorized other than “required” and “optional”. The user can specify, in a user policy, whether or not to include in a request for a security token from an identity provider claims that are not “required”.

Abstract: A system and method for managing information cards using workflows is provided. A workflow manager in a card selector allows the user to initiate cardflows in the card selector. The workflow manager is extensible and programmable so that additional user-defined or industry-defined cardflows can be added to the workflow manager.

Abstract: A selector daemon can run in the background of a computer. Applications that are capable of processing information cards directly, without requiring the use of a card selector, can request the selector daemon to list information cards that satisfy security policy. Upon receiving such a request, selector daemon can determine the information cards available on the computer that satisfy the security policy, and can identify these information cards to the requesting application. The applications can then use the identified information cards in any manner desired, without having to use a card selector: for example, by requesting a security token based on one of the information cards directly from an identity provider.

Abstract: A computer system accesses reputation information about a relying party. The reputation information can be stored locally or remotely (for example, at an identity provider or reputation service). A reputation information engine can be used to provide the reputation information to the user. The user can then use the reputation information in performing a transaction with the relying party.

Abstract: A user desires to select information about himself. The system uses policies applicable to the display of the user's information and metadata about the user and the information to determine modified presentations of the user's information. The modified information can include visual and non-visual cues (such as aural, olfactory, or tactile). The system then displays the modified information, presenting the user with the visual and non-visual cues about the information.

Abstract: A computer system accesses metadata about an information card. The metadata can be stored locally or remotely (for example, at an identity provider). A metadata engine can be used to generate data to be provided to the user from the metadata: this data can take any desired form, such as an advertisement, a state of the user's account, or a policy update, among other possibilities.

Abstract: An identity provider issues information cards in which the credential type and/or the credential data is not specified at the time of issuance. A card selector installs the information cards and either prompts a user for the credential at the time of installation or afterwards. The card selector updates the credential type, the credential data, and/or authentication materials associated with an information card after the information card has been installed, and informs the identity provider about the credential type, credential data, and authentication materials before the information card is used.

Abstract: A user engages in a transaction with a relying party through a computer system. The relying party requests identity information from the user using HTML extensions. The computer system includes a web browser having browser extensions. The HTML extensions cause the web browser to call a card selector invoker. The card selector invoker invokes a card selector to provide a security token. The card selector invoker extracts identity information from the security token and provides the identity information to the web browser. The computer system then returns the identity information to the relying party.

Abstract: A user defines an audit policy. The audit policy identifies one or more triggers that, when related information is included in a security token, trigger the performance of the audit. The audit can include notifying the user in some manner that the trigger occurred. The audit can require in-line confirmation of the audit, so that the security token is not transmitted until the user confirms the audit.

Abstract: When a user connects a pluggable card store to a machine, the machine plugs a pluggable card provider into a card provider registry. The pluggable card store can be an object portable to the user, or can be a remote store available via some connection, such as an FTP connection. The user can then use the information cards stored on the pluggable card store in a transaction.

Abstract: A user engages in a transaction with a relying party. The relying party requests identity information from the user in a security policy and identifies transaction elements for an on-line business transaction. Typically, the security policy and transaction elements are transmitted together; the security policy can be as little as a request to conduct the on-line business transaction. The user identifies an information card that satisfies the security policy. The computer system requests a security token from the identity provider managing the information card, which can include requesting a transaction receipt for the transaction elements. The computer system then returns the security token (and the transaction receipt) to the relying party, to complete the transaction.

Abstract: The user can associate metadata with information cards. The metadata can include, among other possibilities, string names, icons, user policies, containers, and hierarchies. The metadata is stored by the computer system. The metadata can then be used to filter the set of information cards that can satisfy a security policy from a relying party.

Abstract: The invention relates to a television system which typically includes a broadcast data receiver connected to or provided integrally with a television display screen. The system is provided with an internet capability and the invention allows the user of the capability to identify information relating to each of the internet page windows which are live and selectable for display across the screen at that instant by the generation of an information display which includes bibliographic data for each of the page windows. This therefore allows the system which hallows only one page window to be viewed at a time on the screen to be more user friendly.

Abstract: The invention relates to the generation of a display on a display screen, such as that of a television set. The display includes an internet web page, selected for display by a user. The web page includes a display window for a video display generated from video data. The web page and video data are received by a broadcast data receiver connected to the display screen. In accordance with the invention the display window is provided of a predetermined size which is compared with the size of the video display to be shown at that time. If the video display will not fit into the display window, newly set dimensions are generated for the display window thereby allowing the video display to be shown in its entirety and without the need for cropping or any other editing features to be performed.

Abstract: The invention which is the subject of this application is to provide for the dynamic adjustment of the display of a graphic display on a display screen, such as that of a television set. Typically, the display screen shows a video display such as that of a television programme generated from received video data such as via a broadcast data receiver, DVD, VCR or the like. On occasion and typically in response to a user selection a graphic display can be generated and overlaid on the video display to provide information to the user. Changes in the video display to take into account different video display formats and/or the particular format of the display screen can cause the graphic display to be unacceptable but this is avoided in the current invention which allows the graphic display to be altered with respect to the format such that it is visible and in a preferred form.

Abstract: Web browser apparatus, typically located in a broadcast data receiver (BDR), and a method of use thereof is provided. The web browser apparatus includes a communications link to an internet service provider, and allows the user selection of an internet site and the generation and rendering of one or a number of pages of the internet site on a display screen connected to or forming part of the BDR. One or more of said web pages typically including one or more images. The BDR includes storage means in which data indicating the size or sizes of one or more images used in a selected internet site web page is/are extracted from the web page data using the web browser apparatus and stored in the storage means.

Abstract: The invention relates to the generation of user selected pages from an internet site and the delay in the reformatting of the same following a user selection of a new data event i.e. the selection of a new page which is to be displayed. In accordance with the invention, upon a user selection, reformatting of the page is delayed either for a predesignated time interval from the previous page reformatting or until all or a predefined amount of the data for the new page has been received. This allows the processor to be controlled hence preventing delays and/or errors in navigational functions and also can reduce the generation of “flicker” on the on-screen display.

Abstract: A method and apparatus disclosed may be implemented in a digital computer to query a set of arbitrarily structured records. Arbitrarily structured records are structured differently from each other. A query engine, query structure, operators of conventional and non-conventional types may be used in formulating a query. The apparatus may evaluate records having missing fields, repeating fields, or an UNKNOWN value arising from a missing field, division by zero, modulo by zero, or the like. New aggregator (e.g. universal quantifier and existential quantifier) and selector operators (e.g., first, last, nth) may distill multiple values to return a single value. To evaluate a query, the search engine may implement filtered indices, alternate-key indices, compound alternate-key indices, hybrid queries having both full-text and non-full text operands, and joinder of records.

Abstract: A method and apparatus disclosed may be implemented in a digital computer to query a set of arbitrarily structured records. Arbitrarily structured records are structured differently from each other. A query engine, query structure, operators of conventional and non-conventional types may be used in formulating a query. The apparatus may evaluate records having missing fields, repeating fields, or an UNKNOWN value arising from a missing field, division by zero, modulo by zero, or the like. New aggregator (e.g. universal quantifier and existential quantifier) and selector operators (e.g., first, last, nth) may distill multiple values to return a single value. To evaluate a query, the search engine may implement filtered indices, alternate-key indices, compound alternate-key indices, hybrid queries having both full-text and non-full text operands, and joinder of records.