System and method for permission management

• US 8,122,481 B2
• Filed: 08/10/2007
• Issued: 02/21/2012
• Est. Priority Date: 08/11/2006
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Wang, Rui, Zhu, Yongsheng
• Primary Examiner(s): Zand, Kambiz
• Assistant Examiner(s): Tabor, Amare F
• Application Number:
  US11/837,139
• Publication Number:
  US 20080040774A1
• Time in Patent Office: 1,656 Days
• Field of Search: 726/1, 726/27
• US Class Current: 726/1
• CPC Class Codes: G06F 21/604 Tools and structures for managing or administering access control systems
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes

Abstract

The present invention discloses a system and a method for permission management, and a permission management server. The system includes: a privacy owner terminal, for providing a privacy owner'"'"'s privacy; a privacy management system, for obtaining the privacy owner'"'"'s privacy provided by the privacy owner terminal; a privacy inquiry terminal, for inquiring about the privacy owner'"'"'s privacy from the privacy management system and further obtaining an privacy inquirer'"'"'s privacy provided by the privacy management system; a permission management server, for determining whether to grant a privacy inquirer to obtain the privacy owner'"'"'s privacy according to a predetermined privacy permission rule when the privacy inquirer inquires about the privacy owner'"'"'s privacy via the privacy inquiry terminal.

Claims

1. A method for permission management, comprising:

saving, by a permission management server, a privacy permission rule for a privacy owner;

intercepting, by the permission management server, a privacy content inquiry request sent from a privacy inquiry terminal; and

identifying, by the permission management server, the privacy content inquiry request to obtain privacy inquirer information, privacy type information and privacy owner information; and

sending, by the permission management server, a message of Granting Privacy Release to a privacy management system corresponding to a privacy type if a privacy inquirer is granted to obtain an inquired privacy according to the privacy permission rule;

receiving, by the permission management server, a permission rule setting message of the privacy permission rule from a permission rule establisher; and

determining, by the permission management server, whether the permission rule establisher has a right to set the rule;

wherein saving, by a permission management server, the privacy permission rule for a privacy owner further comprises saving the privacy permission rule if the permission rule establisher has a right to set the rule.

2. The method for permission management of claim 1, wherein the privacy owner information is a user name or a contact.

3. The method for permission management of claim 1, wherein after saving the privacy permission rule if the permission rule establisher has the right to set the rule, further comprising:

sending the privacy rule set for a privacy owner to the privacy owner terminal.

4. The method for permission management of claim 1, wherein the right for a permission rule establisher is set according to an administrator terminal.

5. The method for permission management according to claim 4, wherein a permission management server receives a message of Right Setting Request which contains permission rule establisher information and setting right information from the administrator terminal;

and sets the right for the permission rule establisher according to the setting right information if the administrator has a right to set the right for the permission rule establisher.

6. The method for permission management of claim 5, wherein, after setting the right for the permission rule establisher, the permission management server sends a right update notification to the permission rule setting terminal.

7. A server for permission management, comprising:

a permission rule storage unit, adapted to save a privacy permission rule of a privacy owner;

a message intercepting unit, adapted to intercept a privacy content inquiry request sent from a privacy inquiry terminal and provide the privacy content inquiry request to an information identifying unit;

the information identifying unit, adapted to identify information contained in a privacy inquiry provided by the message intercepting unit to get service type information, the privacy owner information and the privacy inquirer information, wherein the privacy inquiry is the privacy content inquiry request, obtain the privacy type information according to a saved relation between the service type information and the privacy type information, and send the privacy type information, the privacy owner information and the privacy inquirer information to the permission inquiry unit;

a permission inquiry unit, adapted to obtain a result of whether to grant a privacy inquirer to get a privacy according to the identified information provided by the information identifying unit and the privacy permission rule saved by the permission rule storage unit;

a unit, adapted to send to a privacy management system the result of permission of privacy;

a permission rule processing unit, for receiving a permission rule setting message from a permission rule establisher, and recording the privacy permission rule in the message in the permission rule storage unit when the permission rule establisher has a right to set a rule;

the permission rule processing unit is further configured for receiving a message of Right Setting Request from an administrator, and updating the right for the permission rule establisher in the permission rule storage unit when the administrator has a right to set the right for the permission rule establisher; and

the permission rule storage unit is further configured for saving the right information set for the permission rule establisher by the administrator.

8. The server of claim 7, further comprising a message receiving unit, configured for receiving a permission checking request which comprises privacy type information, privacy owner information and privacy inquirer information, and providing the permission checking request to the information identifying unit, wherein the privacy inquiry request is the permission checking request.

9. The server of claim 7, further comprising an authentication unit, for returning a user ID which confirms a user'"'"'s right to a user when information provided by the user during login is consistent with saved login information.