Patent ID: 8819800
Filing Date: 2014-08-26
Classification: G06F,H04L,H04W

Abstract:
1. A method for protecting user information in a communication system, the method comprising the steps of: receiving, from an application, a first request to access the user information; determining that the first request does not include an authorized token; responsive to the determination that the first request does not include an authorized token, generating and transmitting a first token to the application; associating the first token with the first request; receiving, from the user, an authentication request that includes the first token obtained from the application by the user; authenticating the user in response to receiving the authentication request; requesting the user to confirm the first request; generating a second token in response to a user-initiated confirmation of the first request; transmitting the second token to the user; associating the second token with the user, wherein the second token is also associated with a user identifier; receiving a second request for accessing the user information from the application, the second request including the second token obtained from the user by the application; and allowing the application to access the user information in response to receiving the second request.