Communication method, device, and system for obtaining authorization information of user-related data

Patent metadata

Field	Value
Publication number	US-12566870-B2
Application number	US-202318164416-A
Country	US
Kind code	B2
Filing date	Feb 3, 2023
Priority date	Aug 6, 2020
Publication date	Mar 3, 2026
Grant date	Mar 3, 2026

Abstract

Embodiments of this application disclose a communication method, device, and system. A first network element sends a first request to a second network element, where the first request is for requesting authorization information of user-related data, the first request includes user information and a first use scope of the user-related data, and the first use scope includes at least one of the following information: a first use object, a first use purpose, or first use time. The first network element receives a first response sent by the second network element, where the first response includes authorization information, and the authorization information indicates whether a user corresponding to the user information allows the related data to be used for the first use scope.

First claim

What is claimed is:

1 . A communication method, comprising:
receiving, by a network data analytics function network element, a second request from a third network element, wherein the second request is for requesting to obtain user-related data; sending, by the network data analytics function network element, a first request to a unified data management network element based on the second request, wherein the first request is for requesting authorization information of the user-related data corresponding to an analytics identifier, wherein the first request comprises user information and a first use purpose for the user-related data, and wherein the analytics identifier identifies a type of analytics performed based on the user-related data; and receiving, by the network data analytics function network element, a first response from the unified data management network element, wherein the first response comprises the authorization information, and the authorization information indicates whether a user corresponding to the user information allows the user-related data to be used for the first use purpose.

2 . The method according to claim 1 ,
wherein the user-related data comprises one or more of first data or second data related to the user; wherein the first data comprises data corresponding to the user generated by at least one of a terminal device, an application server, or a network device; and wherein the second data comprises a data analysis result obtained by performing data analysis based on the first data.

3 . The method according to claim 2 ,
wherein the first request further comprises a first type identifier, and the first type identifier is for identifying a type of the user-related data; and wherein the first request is for requesting authorization information of user-related data corresponding to the first type identifier.

4 . The method according to claim 3 , wherein the user-related data is the first data, the first type identifier is an event identifier, and the first data is data related to an event corresponding to the event identifier.

5 . The method according to claim 1 , wherein the second request comprises the user information and a third use purpose, wherein the method further comprises:
obtaining, by the network data analytics function network element, the first use purpose based on the third use purpose.

6 . The method according to claim 1 , wherein the second request comprises a second type identifier, and the second type identifier is for identifying a type of the user-related data requested by the third network element, wherein the method further comprises:
determining, by the network data analytics function network element, a first type identifier based on the second type identifier.

7 . The method according to claim 6 , wherein the determining, by the network data analytics function network element, the first type identifier based on the second type identifier comprises:
determining, by the network data analytics function network element, a second data type identifier as the first type identifier.

8 . The method according to claim 6 , wherein the determining, by the network data analytics function network element, the first type identifier based on the second type identifier comprises:
determining, by the network data analytics function network element, the first type identifier based on configuration information and a second data type identifier, wherein the configuration information indicates a correspondence between the first type identifier and the second data type identifier.

9 . The method according to claim 1 , wherein the third network element is an application function (AF) network element.

10 . The method according to claim 1 , wherein the first request further comprises at least one of a first user object or a first use time.

11 . The method according to claim 1 , wherein the first use purpose comprises data analytics or exposure to a third party application function.

12 . A communication apparatus, comprising:
a memory, wherein the memory comprises computer-readable instructions; and a processor that communicates with the memory, wherein the processor is configured to execute the computer-readable instructions, to enable the communication apparatus to: receive a second request from a third network element, wherein the second request is for requesting to obtain user-related data; send a first request to a unified data management network element based on the second request, wherein the first request is for requesting authorization information of the user-related data corresponding to an analytics identifier, wherein the first request comprises user information and a first use purpose for the user-related data, and wherein the analytics identifier identifies a type of analytics performed based on the user-related data; and receive a first response from the unified data management network element, wherein the first response comprises the authorization information, and the authorization information indicates whether a user corresponding to the user information allows the user-related data to be used for the first use purpose.

13 . The communication apparatus according to claim 12 , wherein the first request further comprises at least one of a first user object or a first use time.

14 . The communication apparatus according to claim 12 , wherein the first use purpose comprises data analytics or exposure to a third party application function.

15 . The communication apparatus according to claim 12 ,
wherein the user-related data comprises one or more of first data or second data related to the user; wherein the first data comprises data corresponding to the user generated by at least one of a terminal device, an application server, or a network device; and wherein the second data comprises a data analysis result obtained by performing data analysis based on the first data.

16 . The communication apparatus according to claim 12 , wherein the second request comprises the user information and a third use purpose, wherein the processor is further configured to execute the computer-readable instructions to enable the communication apparatus to:
obtain the first use purpose based on the third use purpose.

17 . A communication system, comprising:
a network data analytics function network element; and a unified data management network element; wherein the network data analytics function network element is configured to:
receive a second request from a third network element, wherein the second request is for requesting to obtain user-related data;
send a first request to the unified data management network element based on the second request, wherein the first request is for requesting authorization information of the user-related data corresponding to an analytics identifier, wherein the first request comprises user information and a first use purpose for the user-related data, and wherein the analytics identifier identifies a type of analytics performed based on the user-related data; and
receive a first response from the unified data management network element, wherein the first response comprises the authorization information, and the authorization information indicates whether a user corresponding to the user information allows the user-related data to be used for the first use purpose; and
wherein the unified data management network element is configured to receive the first request and send the first response.

18 . The communication system according to

Assignees

• Huawei Tech Co Ltd

Inventors

• Chong Weiwei
• Xin Yang
• Wu Xiaobo

Classifications

• G06F21/31

  User authentication · CPC title

• H04W12/02

  Protecting privacy or anonymity, e.g. protecting personally identifiable information [PII] · CPC title

• H04W12/63

  Location-dependent; Proximity-dependent · CPC title

• H04L63/107

  wherein the security policies are location-dependent, e.g. entities privileges depend on current location or allowing specific operations only from locally connected terminals · CPC title

• H04W12/61

  Time-dependent · CPC title