Method, apparatus and system for obtaining user information

• US 8,875,225 B2
• Filed: 06/08/2012
• Issued: 10/28/2014
• Est. Priority Date: 12/10/2009
• Status: Active Grant

• Current Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Original Assignee: Huawei Technologies Co., Ltd. (Huawei Investment & Holding Co., Ltd.)
• Inventors: Chang, Heng, Chen, Weiliang, Shi, Xiaomin, Ma, Qifeng, Wang, Huan, Chen, Shan, Li, Yan
• Primary Examiner(s): REVAK, CHRISTOPHER A
• Application Number:
  US13/492,086
• Publication Number:
  US 20120246716A1
• Time in Patent Office: 872 Days
• Field of Search: None
• US Class Current: 726/1
• CPC Class Codes: G06F 21/00 Security arrangements for protecting computers, components thereof, programs or data against unauthorised activity
• CPC Class Codes: G06F 2221/2101 Auditing as a secondary aspect
• CPC Class Codes: G06F 2221/2105 Dual mode as a secondary aspect
• CPC Class Codes: G06F 2221/2141 Access rights, e.g. capability lists, access control lists, access tables, access matrices
• CPC Class Codes: H04L 63/102 Entity profiles

Abstract

A method, apparatus and system for obtaining user information are disclosed by the present invention. The present invention solves the problem of lower security of user information. The method includes: obtaining the interactive state of the service requester in the service request process, wherein the interactive state is used for indicating the specific state in which the service requester and its service are during the process of interaction with each other; determining if the interactive state of the service requester, in the process of requesting the service, meets the preset access-authorized-policy of the user information in the service request; when the interactive state of the service requester, in the process of requesting the service, meets the preset access-authorized-policy of the user information in said service request, obtaining the user information and sending the user information to the service.

Claims

1. A method for obtaining user information in an identity proxy, comprising:

obtaining an interactive state of a service requester in a service request process, wherein the interactive state indicates a service execution state of the service request during the process of interaction between the service requester and a service;

determining whether the interactive state of the service requester meets a preset access-authorized-policy of the user information requested by the service; and

sending an one-off authorization instruction for obtaining user information to a User Profile when the interactive state of the service requester in the service request process meets the access-authorized-policy of the user information;

obtaining the user information included in a request response from the User Profile; and

forwarding the received request response comprising the user information to the service.

2. The method according to claim 1, wherein before obtaining the interactive state of the service requester in the service request process, the method further comprising:

sending to a service router or the service requester a configuration instruction for recording the interactive state of the service requester in the service request process according to the access-authorized-policy of the user information.

3. An identity proxy, comprising:

a first obtaining module configured to obtain an interactive state of a service requester in a service request process, wherein the interactive state indicates a service execution state of the service request during the process of interaction between the service requester and a service;

a judging module configured to determine whether the interactive state of the service requester obtained by the first obtaining module meets a preset access-authorized-policy of the user information requested by the service;

a second obtaining module configured to send a user information obtaining request to a User Profile when the judging module determines that the interactive state of the service requester in the service request process meets the access-authorized-policy of the user information and obtain the user information included in a request response from the User Profile; and

a first sending module configured to forward the received request response comprising the user information obtained by the second obtaining module to the service.

4. The identity proxy according to claim 3, further comprising:

a second sending module configured to send to a service router or the service requester a configuration instruction for recording the interactive state of the service requester in the service request process according to the access-authorized-policy of the user information.

5. A method implemented in a communication system, comprising:

obtaining an interactive state of a service requester in a service request process, wherein the interactive state indicates a specific state in which the service requester and the service are during the process of interaction with each other;

determining whether the interactive state of the service requester in the service request process meets a preset access-authorized-policy of user information in the service request;

generating an one-off authorization instruction for obtaining user information when the interactive state of the service requester in the service request process meets the access-authorized-policy of user information in the service request; and

sending the one-off authorization instruction for obtaining user information to the service.