User Data Authorization Scope for Privacy-Safe Network Analytics
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Communication operator networks lack a precise method to obtain authorization information for user-related data, hindering their ability to perform data analysis and utilization.
Innovation Solution
A communication method and system that enables a first network element to send a request to a second network element for authorization information, including user information and a use scope, allowing the first network element to obtain user-related data when authorization is granted, and ensuring secure and comprehensive data protection through differentiated authorization for various types of data.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Productivity
If the communication operator network obtains user-based data for data analysis, then data utilization and analysis capability are improved, but user privacy protection and data security deteriorate
Solution Approach 1:
The patent segments user data into different types (first data from terminals, second data from network devices, third data as analysis results) and applies differentiated authorization mechanisms to each type. This allows the network to utilize various data types for analysis while protecting user privacy through type-specific access controls and authorization requirements.
Solution Approach 2:
The patent implements local quality by applying different authorization levels and protection mechanisms to different data types and usage scenarios. First data requires terminal authorization, second data requires network element authorization, and third data has its own authorization rules, enabling tailored privacy protection for each data category while maintaining overall data utilization.
2Object-affected harmful factors
If the communication operator network prohibits obtaining user-based data, then user privacy protection is improved, but data analysis capability and utilization deteriorate
Solution Approach 1:
The patent introduces dynamic authorization mechanisms where access to user data is not fixed but determined at runtime based on authorization tokens obtained from terminals or network elements. This dynamic approach enables the network to flexibly grant data access for analysis when authorized while maintaining privacy protection when authorization is not obtained, resolving the contradiction between protection and utilization.
Solution Approach 2:
The patent introduces authorization tokens as intermediaries between the network and user data. These tokens mediate access requests by verifying authorization status before allowing data retrieval, enabling the network to perform data analysis only when proper authorization is obtained while maintaining default privacy protection, thus resolving the contradiction between data utilization and privacy protection.
3Device complexity
If a unified authorization approach is used for all user data, then system complexity is reduced, but measurement precision of authorization control deteriorates
Solution Approach 1:
The patent segments the authorization system into distinct components for different data types (first data authorization, second data authorization, third data authorization). Each segment has its own authorization rules and mechanisms, which reduces overall system complexity by handling each data type independently rather than requiring a single complex unified system, while simultaneously improving authorization precision through type-specific controls.
4Reliability
If the network obtains authorization information for user data, then data security is improved, but system complexity and operational overhead increase
Solution Approach 1:
The patent implements preliminary action by obtaining authorization tokens from terminals or network elements before accessing user data. This advance authorization approach ensures data security is established prior to data retrieval operations, preventing unauthorized access while streamlining the actual data access process by having authorization pre-validated, thus improving security without proportionally increasing operational complexity during data operations.
Data Source
AI summary
Embodiments of this application disclose a communication method, device, and system. A first network element sends a first request to a second network element, where the first request is for requesting authorization information of user-related data, the first request includes user information and a first use scope of the user-related data, and the first use scope includes at least one of the following information: a first use object, a first use purpose, or first use time. The first network element receives a first response sent by the second network element, where the first response includes authorization information, and the authorization information indicates whether a user corresponding to the user information allows the related data to be used for the first use scope.