SYSTEM AND METHOD FOR PERMISSION MANAGEMENT

• US 20080040774A1
• Filed: 08/10/2007
• Published: 02/14/2008
• Est. Priority Date: 08/11/2006
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Rui, Zhu, Yongsheng
• Granted Patent: US 8,122,481 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

The present invention discloses a system and a method for permission management, and a permission management server. The system includes: a privacy owner terminal, for providing a privacy owner'"'"'s privacy; a privacy management system, for obtaining the privacy owner'"'"'s privacy provided by the privacy owner terminal; a privacy inquiry terminal, for inquiring about the privacy owner'"'"'s privacy from the privacy management system and further obtaining an privacy inquirer'"'"'s privacy provided by the privacy management system; a permission management server, for determining whether to grant a privacy inquirer to obtain the privacy owner'"'"'s privacy according to a predetermined privacy permission rule when the privacy inquirer inquires about the privacy owner'"'"'s privacy via the privacy inquiry terminal.

Claims

1. A system for permission management, comprising:

a privacy owner terminal, for providing a privacy owner'"'"'s privacy;

a privacy management system, for obtaining the privacy owner'"'"'s privacy provided by the privacy owner terminal;

a privacy inquiry terminal, for inquiring about the privacy owner'"'"'s privacy from the privacy management system; and

a permission management server, for determining whether to grant a privacy inquirer to obtain the privacy owner'"'"'s privacy according to a predetermined privacy permission rule when the privacy inquirer inquires about the privacy owner'"'"'s privacy via the privacy inquiry terminal,

wherein when a result of whether to grant means “

Grant”

, the privacy management system provides the privacy owner'"'"'s privacy to the privacy inquiry terminal in response to the result.

2. The system for permission management of claim 1, wherein:

the privacy management system is further configured for receiving a privacy content inquiry request from the privacy inquiry terminal and sending a permission checking request to the permission management server in response to the receiving; and

the permission management server is further configured for receiving the permission checking request, and identifying the permission checking request to obtain privacy type information, privacy inquirer information and privacy owner information and obtaining the result of whether to grant the privacy inquirer to obtain the privacy owner'"'"'s privacy of the type according to the predetermined privacy permission rule.

3. The system for permission management of claim 1, wherein

the permission management server is further configured for intercepting a privacy content inquiry request to be sent to the privacy management system from the privacy inquiry terminal and identifying the privacy content inquiry request to obtain the privacy type information, the privacy inquirer information and the privacy owner information, and obtaining the result of whether to grant the privacy inquirer to get the privacy owner'"'"'s privacy of the type of according to the predetermined privacy permission rule.

4. The system for permission management of claim 1, wherein:

the permission management server is further configured for providing the result to the privacy management system or directly notifying the privacy inquiry terminal of privacy request failure information when the result means “

Deny”

;

the privacy management system is further used for notifying the privacy inquiry terminal of the privacy request failure information when the result provided by the permission management server means “

Deny”

; and

the privacy inquiry terminal is further used for receiving the privacy request failure information returned by the permission management server or the privacy management system.

5. The system for permission management of claim 1, further comprising a permission rule setting terminal, for setting the privacy permission rule of a privacy owner on the permission management server.

6. The system for permission management of claim 1, further comprising an administrator terminal, for setting a right for a permission rule establisher on the permission management server, and the permission management server is further used for saving the right set for the permission rule establisher by the administrator.

7. The system for permission management of claim 1, wherein the privacy management system is a Location Service system or a Presence Service system.

8. A method for permission management, comprising:

saving a privacy permission rule for a privacy owner;

identifying information contained in a privacy inquiry request; and

determining whether to grant to release privacy information of the privacy owner according to the identified information and the privacy permission rule.

9. The method for permission management of claim 8, wherein, the privacy inquiry request is a privacy content inquiry request to be sent to a privacy management system from a privacy inquiry terminal;

the identifying the information contained in the privacy inquiry request comprises;

intercepting, by a permission management server, the privacy content inquiry request, and identifying the privacy content inquiry request to obtain privacy inquirer information, privacy type information and privacy owner information; and

the determining whether to grant to release the privacy information of the privacy owner according to the identified information and the privacy permission rule comprises;

sending, by the permission management server, a message of Granting Privacy Release to the privacy management system corresponding to a privacy type if a privacy inquirer is granted to obtain an inquired privacy according to the privacy permission rule.

10. The method for permission management of claim 8, wherein, the privacy inquiry request is a permission checking request transmitted to a permission management server by a privacy management system when the privacy management system receives a privacy content inquiry request from a privacy inquiry terminal, the identifying the information contained in the privacy inquiry request comprises:

identifying, by the permission management server, the permission checking request to obtain the privacy inquirer information, the privacy type information and the privacy owner information; and

the determining whether to grant to release the privacy information of the privacy owner according to the identified information and the privacy permission rule comprises;

returning, by the permission management server, a message of Granting Privacy Release to the privacy management system if a privacy inquirer is granted to obtain an inquired privacy according to the privacy permission rule.

11. The method for permission management of claim 9, wherein the determining whether to grant to release the privacy information of the privacy owner according to the identified information and the privacy permission rule further comprises:

transmitting by the permission management server, a message of Privacy Request Failure to the privacy inquiry terminal or transmitting, by the permission management server, a message of Denying Privacy Release to the privacy management system, when the privacy inquirer is not granted to obtain the inquired privacy.

12. The method for permission management of claim 9, wherein the privacy owner information is a user name or a contact.

13. The method for permission management of claim 8, further comprises:

receiving, a permission rule setting message of the privacy permission rule from a permission rule establisher; and

determining whether the permission rule establisher has a right to set the rule;

wherein, the saving the privacy permission rule for a privacy owner further being saving the privacy permission rule if the permission rule establisher has a right to set the rule.

14. The method for permission management of claim 13, wherein after saving the privacy permission rule if the permission rule establisher has the right to set the rule, further comprising:

sending the privacy rule set for a privacy owner to the privacy owner terminal.

15. The method for permission management of claim 13, wherein the right for a permission rule establisher is set according to an administrator terminal.

16. The method for permission management according to claim 15, wherein a permission management server receives a message of Right Setting Request which contains permission rule establisher information and setting right information from the administrator terminal;

and sets the right for the permission rule establisher according to the setting right information if the administrator has a right to set the right for the permission rule establisher.

17. The method for permission management of claim 16, wherein, after setting the right for the permission rule establisher, the permission management server sends a right update notification to the permission rule setting terminal.

18. A system for permission management, comprising:

a permission rule storage unit, for saving a privacy permission rule of a privacy owner;

an information identifying unit, for identifying information contained in a privacy inquiry request and providing the identified information; and

an permission inquiry unit, for obtaining a result of whether to grant a privacy inquirer to get a privacy according to the identified information provided by the information identifying unit and the privacy permission rule saved by the permission rule storage unit.

19. The system of claim 18, further comprising a message receiving unit, configured for receiving a permission checking request which comprises privacy type information, privacy owner information and privacy inquirer information, and providing the permission checking request to the information identifying unit, wherein the privacy inquiry request is the permission checking request.

20. The system of claim 18, further comprising a message intercepting unit, for intercepting a privacy content inquiry request sent from a privacy inquiry terminal and providing the privacy content inquiry request to the information identifying unit, wherein the privacy inquiry request is the privacy content inquiry request.

the information identifying unit, for identifying the privacy inquiry request provided by the message intercepting unit to get service type information, the privacy owner information and the privacy inquirer information, obtaining the privacy type information according to a saved relation between the service type information and the privacy type information, and sending the privacy type information, the privacy owner information and the privacy inquirer information to the permission inquiry unit.

21. The system of claim 18, further comprising a permission rule processing unit, for receiving a permission rule setting message from a permission rule establisher, and recording the privacy permission rule in the message in the permission rule storage unit when the permission rule establisher has a right to set a rule.

22. The system of claim 21 wherein:

the permission rule processing unit is further used for receiving a message of Right Setting Request from an administrator, and updating the right for the permission rule establisher in the permission rule storage unit when the administrator has a right to set the right for the permission rule establisher; and

the permission rule storage unit is further used for saving right information set for the permission rule establisher by the administrator.

23. The system of claim 18, further comprising an authentication unit, for returning a user ID which confirms a user'"'"'s right to a user when information provided by the user during login is consistent with saved login information.