Anonymous customer reference services enabler

• US 9,843,927 B2
• Filed: 11/30/2016
• Issued: 12/12/2017
• Est. Priority Date: 04/12/2012
• Status: Active Grant

• Current Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Original Assignee: AT&T Intellectual Property I LP (AT&T, Inc.)
• Inventors: Mohajeri, Shahram
• Primary Examiner(s): Patel, Nimesh
• Application Number:
  US15/365,608
• Publication Number:
  US 20170086066A1
• Time in Patent Office: 377 Days
• CPC Class Codes: H04L 63/0876 based on the identity of the terminal or configuration, e.g. MAC address, hardware or software configuration or device fingerprint
• CPC Class Codes: H04W 12/02 Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII]
• CPC Class Codes: H04W 12/06 Authentication
• CPC Class Codes: H04W 12/75 Temporary identity
• CPC Class Codes: H04W 76/11 Allocation or use of connection identifiers
• CPC Class Codes: H04W 76/14 Direct-mode setup

Abstract

Variable subscriber identifiers (V-SubIds) for protecting subscriber privacy are generated and managed. In one aspect, an Anonymous Customer Reference Services (ACRS) component generates a V-SubId, which is a short-lived subscriber identifier that is inserted in a request received from a user equipment during request enrichment. Moreover, a different V-SubId can be inserted in subsequent request from the user equipment and thus, cross-site behavior tracking can be mitigated. In one aspect, the V-SubId can be exchanged for a subscriber identifier (SubId) associated with the user equipment, upon query by trusted systems/applications. Further, the V-SubId can be exchanged for a site-specific Anonymous Customer Reference (ACR) upon query by untrusted systems/applications, if user authorization is received. Moreover, the life cycle of the ACR is managed by the ACRS component, based on subscriber input.

Claims

1. A system, comprising:

a processor; and

a memory that stores executable instructions that, when executed by the processor, facilitate performance of operations, comprising;

facilitating an authentication of a user equipment that allows the user equipment to connect with a device of a cellular network, wherein the authentication is based on static identifier data indicative of a static identifier assigned to a subscriber account related to the user equipment, and wherein the static identifier is independent of a mobile station international subscriber directory number and independent of a subscriber identity module of the user equipment; and

based on the authentication, selecting variable subscriber identifier data indicative of a variable subscriber identifier to be assigned to the user equipment, wherein the variable subscriber identifier is updated in response to determining that an expiration criterion has been satisfied, and wherein the variable subscriber identifier data is directed to an untrusted device with first request data indicative of a first request for a first operation to be performed that is received from the user equipment, and wherein the variable subscriber identifier is updated in response to determining that a time has expired.

2. The system of claim 1, wherein the system comprises a proxy server device.

3. The system of claim 1, wherein the variable subscriber identifier is updated in response to determining that a data session associated with the user equipment has been terminated.

4. The system of claim 1, wherein the operations further comprise:

facilitating a transmission of the static identifier data to a trusted device during a communication between the user equipment and the trusted device.

5. The system of claim 1, wherein the untrusted device is a first untrusted device and the operations further comprise:

in response to determining that second request data indicative of a second request, for a second operation to be performed that is to be directed to a second untrusted device, has been received from the user equipment, directing, to the second untrusted device, the variable subscriber identifier data with the second request data.

6. The system of claim 1, wherein the operations further comprise:

in response to receiving, from the untrusted device, query data requesting anonymous customer reference data indicative of an anonymous customer reference value that corresponds to the variable subscriber identifier and is assigned to the untrusted device, determining the anonymous customer reference data.

7. The system of claim 6, wherein the determining the anonymous customer reference data comprises determining the anonymous customer reference data subsequent to receiving authorization data from the user equipment.

8. The system of claim 7, wherein the authorization data specifies a defined time period relating to the expiration criterion.

9. The system of claim 6, wherein the operations further comprise:

storing, in a network data store, identifier data indicative of the untrusted device and the anonymous customer reference data, wherein the identifier data is linked to the anonymous customer reference data, and wherein the identifier data comprises uniform resource locator data associated with the untrusted device.

10. The system of claim 6, wherein the anonymous customer reference data is deleted in response to receiving cancellation request data from the user equipment.

11. The system of claim 6, wherein the anonymous customer reference data comprises a defined code that specifies that the anonymous customer reference data comprises an anonymous customer reference value.

12. The system of claim 1, wherein the operations further comprise:

in response to determining that second request data indicative of a second request for the static identifier has been received from a trusted device, facilitating a transmission of the static identifier data to the trusted device, wherein the second request data comprises anonymous customer reference data.

13. A method, comprising:

based on an authorization of a user equipment with a network device of a cellular network, determining, by a gateway device of the cellular network that comprises a processor, variable subscriber identifier data indicative of a variable subscriber identifier that is to be assigned to the user equipment, wherein the variable subscriber identifier is modified in response to determining that an expiration criterion has been satisfied, wherein the authorization is based on static identifier data indicative of a static identifier assigned to a subscriber account related to the user equipment, wherein the static identifier is independent of identity information of a subscriber identity module of the user equipment, and wherein the variable subscriber identifier is updated in response to determining that a time has expired; and

directing, by the gateway device, the variable subscriber identifier data to an untrusted device with communication data that is received from the user equipment.

14. The method of claim 13, further comprising:

prohibiting, by the gateway device, a transmission of the static identifier data to the untrusted device.

15. The method of claim 13, further comprising:

in response to the receiving, from the untrusted device, query data requesting anonymous customer reference data comprising an anonymous customer reference value that corresponds to the variable subscriber identifier, assigning, by the gateway device, the anonymous customer reference data to the untrusted device.

16. The method of claim 15, further comprising:

storing, by the gateway device, address data indicative of an address of the untrusted device with the anonymous customer reference value.

17. The method of claim 15, further comprising:

in response to receiving cancellation request data from the user equipment, deleting, by the gateway device, the anonymous customer reference data.

18. A computer readable storage medium, comprising executable instructions that, when executed by a processor, facilitate performance of operations comprising:

based on an authorization of a user equipment with a network device of the cellular network, determining variable subscriber identifier data indicative of a variable subscriber identifier that is to be assigned to the user equipment, wherein the variable subscriber identifier is updated in response to determining that an expiration criterion has been satisfied, wherein the authorization is based on static identifier data indicative of a static identifier that is assigned to a subscriber account related to the user equipment, wherein the static identifier data utilized during a first communication of the user equipment with an untrusted device is replaced with the variable subscriber identifier data, wherein the static identifier is independent of a subscriber identity module of the user equipment, and wherein the variable subscriber is updated in response to determining that a timer has expired; and

in response to receiving, from the untrusted device, query data requesting anonymous customer reference data, linking the anonymous customer reference data to the untrusted device.

19. The computer readable storage medium of claim 18, wherein the anonymous customer reference data is indicative of an anonymous customer reference value that corresponds to the variable subscriber identifier.

20. The computer readable storage medium of claim 18, wherein the linking comprises linking the anonymous customer reference data to the untrusted device in response to receiving authorization data from the user equipment.