A personal information management method and system

Abstract

The invention discloses a personal information management method and system. This method is as follows: 1) The identity service provider IDP receives the personal information query request sent by the user terminal; when the query object in the personal information query request is only the IDP, the IDP performs corresponding data processing locally to obtain the user's ID in the IDP. Personal information; when the query object of the personal information query request includes one or more third-party applications, the IDP constructs the third-party application personal information query request and sends it directly to the specified third-party application; the third-party application personal information query request includes IDP , Query object and query content, the query object includes the identifier of the third-party application; 2) The third-party application obtains the personal information of the user in the third-party application according to the received third-party application personal information query request, and returns it to the IDP ; 3) The IDP returns the queried personal information to the user terminal.

Description

technical field [0001] The invention belongs to the field of personal privacy protection in network technology, and in particular relates to a method and system for managing personal information (PI) of network users, especially a method and system for managing personal information based on OAuth or OpenID. Background technique [0002] Resource sharing and interoperability of personal information between different network applications have become a trend. At present, some de facto standards have emerged in the industry, which technically promote the cross-domain circulation of network resources and personal information. Among them, an open third party resource authorization protocol framework (Open third party resource authorization protocol framework, OAuth) and an open identity authentication framework (Open identity authentication framework, OpenID) are widely used. OAuth enables users to use applications in one security domain to access protected resources in another se...

AI Technical Summary

Problems solved by technology

[0003] However, in the process, as the mobility of users' personal information increases, personal information is scattered in a large number of different network applications, and personal information management becomes more and more complicated.

Images