Patent ID: 9391998
Filing Date: 2016-07-12
CPC Classification: H04L

Claim Text:
1. A method comprising: receiving, by a device, a request, from another device, to authorize a release of protected resource data, wherein the request includes a device identifier that identifies the other device and one or more indicators that indicate one or more attributes of the protected resource data being requested; authenticating the other device based on the device identifier included in the request; storing a first mapping between indicators and sensitivity levels, wherein the sensitivity levels include a private sensitivity level and a public sensitivity level, wherein the private sensitivity level indicates that consent from a resource owner is to be obtained for release of an instance of protected resource data assigned the private sensitivity level, and the public sensitivity level indicates that consent from the resource owner is not to be obtained for release of an instance of protected resource data assigned the public sensitivity level; identifying, by the device, a sensitivity level for each indicator in response to a successful authentication of the other device; determining, by the device, whether or not the one or more indicators require consent from the resource owner of the protected resource data based on the identifying; identifying, by the device, based on the device identifier, contextual information that indicates a preferred type of consent to be used to obtain consent from the resource owner, in response to determining that at least one of the one or more indicators requires consent from the resource owner, wherein the preferred type of consent is a preference setting requested by the other device; selecting, by the device, a type of consent to be used to obtain consent from the resource owner based on the contextual information and one or more sensitivity levels corresponding to the one or more indicators; requesting to a user device associated with the resource owner, consent from the resource owner according to the type of consent, based on the selecting; generating, by the device, an authorization code in response to receiving consent from the resource owner; and transmitting, by the device and to the other device, the authorization code.