Identity Proxy for Dynamic User Information Access Control
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing communication systems face security risks as service servers can access user information at any time, potentially leading to abuse, compromising user information protection.
Innovation Solution
An identity proxy is used to obtain and manage user information by assessing the interactive state of a service requester against a preset access-authorized-policy, ensuring that user information is only accessed when the service execution state allows it, thereby controlling access and enhancing security.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Adaptability or versatility
If the service server uses a token to access the interactive server at any time, then the service server can obtain user information flexibly, but the security protection of user information deteriorates and the risk of abuse increases
Solution Approach 1:
The patent introduces an identity proxy as an intermediary component between the service server and the interactive server. The identity proxy receives requests from the service server, validates them against access policies, and only forwards authorized requests to the interactive server. This mediator architecture maintains the flexibility of token-based access while adding a security layer that prevents unauthorized or abusive access to user information.
2Duration of action of stationary object
If the service server can access user information at any time, then the service can be provided continuously, but the risk that user information may be abused increases
Solution Approach 1:
The patent implements dynamic access control by evaluating the interactive state of the service requester in real-time against predefined access policies. Instead of static permission settings, the system dynamically determines whether to grant access based on the current service execution state. This allows continuous availability of user information when services are actively being provided while preventing abuse during unauthorized access attempts.
3Ease of operation
If the service server obtains user information through the interactive server using a token, then the access process is simplified, but the security control over user information access is weakened
Solution Approach 1:
The identity proxy serves as an intermediary that maintains the simplified token-based access process while enhancing security control. The proxy validates tokens and enforces access policies without requiring changes to the overall access workflow. This layered approach preserves ease of operation at the service server level while implementing robust security control at the identity proxy level.
Data Source
Figure 1~4
Figure 5~8
Figure 9~11
AI summary
A method, apparatus and system for obtaining user information are disclosed by the present invention. The present invention solves the problem of lower security of user information. The method includes: obtaining the interactive state of the service requester in the service request process, wherein the interactive state is used for indicating the specific state in which the service requester and its service are during the process of interaction with each other; determining if the interactive state of the service requester, in the process of requesting the service, meets the preset access-authorized-policy of the user information in the service request; when the interactive state of the service requester, in the process of requesting the service, meets the preset access-authorized-policy of the user information in said service request, obtaining the user information and sending the user information to the service.