Patent ID: 8881241

Claim:
A method implemented by at least one privacy server for privacy control in a communication network, wherein the communication network includes a trusted subsystem and an untrusted subsystem, wherein the trusted subsystem includes the at least one privacy server and the untrusted subsystem includes at least one Service Provider (SP), wherein the method comprises: generating a Request Verification Code (RVC) for each user request that is to be sent from the trusted subsystem to an SP in the untrusted subsystem, wherein an RVC is generated for a user request by performing parameter hashing or non-Parameter-hashing with respect to that user request and is to be sent to the SP along with the user request, wherein parameter hashing is a hashing algorithm applied on at least one parameter included in the user request and wherein a non-parameter hashing is a hashing algorithm that utilizes a unique identifier independent of the user request; and for each request that is received at the trusted subsystem from an SP in the untrusted subsystem and that implicates privacy settings of a user, verifying the integrity of that received request based on an RVC received together with the request and verifying whether the privacy settings of the user allow the request.