Managing permission for accessing third party applications on a telecommunications network

• US 7,499,995 B2
• Filed: 06/28/2005
• Issued: 03/03/2009
• Est. Priority Date: 06/28/2005
• Status: Active Grant

• Current Assignee: Kyndryl Incorporated (Kyndryl Holdings, Inc.)
• Original Assignee: International Business Machines Corporation
• Inventors: Armstrong, Benjamin Edward
• Primary Examiner(s): Harper; Vincent P
• Assistant Examiner(s): Sabouri; Mazda
• Application Number:
  US11/168,588
• Publication Number:
  US 20060293034A1
• Time in Patent Office: 1,344 Days
• Field of Search: 455/414.1, 455/414.2
• US Class Current: 709/224
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 63/168 above the transport layer
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method and system are presented that controls which TPAs are authorized to access user data and execute services provided by a service delivery platform in a telecommunications network. The method defines a level of access authorized for each user to protect the privacy of data that populates the TPA.

Claims

1. A method for managing access to Third Party Applications (TPAs) on a telecommunications network, the method comprising:

accessing a worklist page that shows a list of all Third Party Applications (TPAs) that are on a telecommunications Service Delivery Platform (SDP);

wherein the worklist page comprises a first list of all pending invitations to the multiple mobile devices to subscribe to one or more of the TPAs, a second list of all TPAs that are currently available to be contacted, a third list of all pending requests from the multiple mobile devices to subscribe to one or more of the TPAs, and a fourth list of new mobile devices that have recently been added to the telecommunication network;

broadcasting an invitation to multiple mobile devices to subscribe to one or more of the TPAs;

in response to a mobile device returning a message accepting the invitation to subscribe to one of the TPAs, determining a level of access to the one of the TPAs that the accepting mobile device has accepted the subscription thereto; and

providing access, to the accepting mobile device, to the TPA at an authorized access level.

2. The method of claim 1, wherein any mobile device that is listed on a blacklist for a specific TPA is barred from accessing that specific TPA.

3. The method of claim 1, wherein the invitations are broadcast using text messaging via a Voice/Text Message System (V/TMS) in the SDP.

4. The method of claim 1, wherein the invitations are broadcast using voice messaging via a Voice/Text Message System (V/TMS) in the SDP.

5. The method of claim 1, wherein the SDP is part of a Telecommunications Service Provider (TSP), wherein the TSP also includes a TSP owner.

6. The method of claim 5, wherein the TSP owner includes a Network Administrator (NA), and wherein said NA controls which mobile devices are authorized to access a TPA.

7. The method of claim 1, wherein the TPAs are from a Third Party Enterprise (TPE) that autonomously controls, independently of the TSP, which mobile devices are authorized to access TPAs in the SDP.

8. The method of claim 7, wherein the TPE has a Telecommunications Manager (TM) that controls which mobile device is authorized to subscribe to a TPA.

9. The method claim 7, wherein the access level authorized for an accepting mobile device is determined by consulting a Consumer Data and Privacy Management (CD&

PM) database.

10. The method of claim 1, wherein an invitation to subscribe to a TPA is cancelled after a pre-determined period of time.

11. The method of claim 1, wherein broadcasting the invitation is performed by the telecommunications SDP.

12. The method of claim 1, further comprising:

querying, by the telecommunications SDP, a Telecom Administrator (TA) for permission to broadcast the invitation to multiple mobile devices used by employees of an enterprise, wherein the TA administers access to the multiple mobile devices used by employees of the enterprise; and

in response to the TA granting the telecommunications SDP permission, broadcasting the invitation to the multiple mobile devices used by employees of the enterprise.

13. The method of claim 12, further comprising:

in response to the TA denying the telecommunications SDP permission, blocking the invitation to multiple mobile devices used by employees of an enterprise.

14. The method of claim 1, wherein the TPA remains available to other mobile devices after a pre-determined period of time expires.

15. The method of claim 1, wherein the worklist page comprises a first list of all pending invitations to the multiple mobile devices to subscribe to one or more of the TPAs, a second list of all TPAs that are currently available to be contacted, a third list of all pending requests from the multiple mobile devices to subscribe to one or more of the TPAs, and a fourth list of new mobile devices that have recently been added to the telecommunication network.

16. The method of claim 1, wherein one of the TPAs is an Instant Messenger (IM) program, wherein the IM program enables multiple users to type messages back and forth in real time to cell phones of other IM users that are on a same buddy list of authorized IM users, and wherein the IM program provides a user with information showing:

1) which persons on a buddy list of the user are currently available for IM messages;

2) that a specific person on the buddy list of the user is available for text messages to be received on a cell phone used by the specific person;

3) a current location of the specific person who is available for text messages to be received; and

4) an option to send a text message to the specific person, wherein the option to send the text message to the specific person includes a notice to there will be a charge for sending the text message to the specific person, wherein the charge will be levied against the user who sends the text message.

17. A computer-readable storage medium having a plurality of instructions processable, by a machine embodied therein, wherein said plurality of instructions, when processed by said machine causes said machine to perform a method for managing access to Third Party Applications (TPAs) on a telecommunications network, the method comprising:

accessing a worklist page that shows a list of all Third Party Applications (TPAs) that are on a telecommunications Service Delivery Platform (SDP);

wherein the worklist page comprises a first list of all pending invitations to the multiple mobile devices to subscribe to one or more of the TPAs, a second list of all TPAs that are currently available to be contacted, a third list of all pending requests from the multiple mobile devices to subscribe to one or more of the TPAs, and a fourth list of new mobile devices that have recently been added to the telecommunication network;

broadcasting an invitation to multiple mobile devices to subscribe to one or more of the TPAs;

in response to a mobile device returning a message accepting the invitation to subscribe to one of the TPAs, determining a level of access to the one of the TPAs that the accepting mobile device has accepted the subscription thereto; and

providing access, to the accepting mobile device, to the TPA at an authorized access level.

18. The computer-readable storage medium of claim 17, wherein any mobile device that is listed on a blacklist for a specific TPA is barred from accessing that specific TPA.

19. The computer-readable storage medium of claim 17, wherein the invitations are broadcast using text messaging via a Voice/Text Message System (V/TMS) in the SDP.

20. The computer-readable storage medium of claim 17, wherein the processable instructions are provided by a service provider to a customer on an on-demand basis, wherein the on-demand basis is determined by evaluating a Central Processing Unit (CPU) capacity of a server computer, and wherein if sufficient CPU capacity at the server computer is not available to receive the computer program code, allocating additional CPU capacity from another CPU in the server computer to receive and process the computer program code.