Method for selectively exposing subscriber data
View Patent ↗Methods, systems, and apparatuses for selectively exposing subscriber data include maintaining subscriber data at a digital data storage, wherein the digital data storage is protected by a service provider firewall. A request to expose subscriber data from a third-party requestor is received. Selected subscriber data and a security condition associated with the request are determined, wherein the security condition is based on an identity of the third-party requestor. The selected subscriber data is retrieved if the security condition is satisfied, and the selected subscriber data is transmitted to the third-party requestor.
1. A method comprising:
at a processor communicatively coupled to a digital data storage, maintaining subscriber data at the digital data storage, wherein the digital data storage is protected by a service provider firewall;
receiving, via an application programming interface communicatively coupled to the processor, a request from a third-party requestor to expose the subscriber data;
determining, by the processor in cooperation with the digital data storage, selected subscriber data and a security condition associated with the request;
determining a historical calling pattern and a historical location pattern of the third-party requestor, the historical calling pattern and the historical location pattern determined for a selected time period and relative to a stored location pattern associated with the third-party requestor;
requesting authentication information of the third-party requestor based on a result of the historical calling pattern and the historical location pattern of the third-party requestor determined relative to the stored location pattern associated with the third-party requestor;
determining a confidence level score representing a confidence level in a represented identity of the third-party requestor, wherein the confidence level score varies relative to a threshold confidence level score of the security condition based on one of a monitored characteristic of the third-party requestor and a determined location of the third-party requestor, and wherein the monitored characteristic includes the determined historical calling pattern, the previous historical location pattern, and the authentication information of the third party requestor;
responsive to a reduction in the confidence level score based upon the historical calling pattern and the historical location pattern, requesting additional authentication data from the third-party requestor in order to satisfy the threshold confidence level score;
selectively retrieving, by the processor in cooperation with the digital data storage, the selected subscriber data if the threshold confidence level score of the security condition is satisfied; and
transmitting, by the processor in cooperation with the digital data storage, the selected subscriber data to the third-party requestor.
2. The method of claim 1 , wherein retrieving further comprises determining whether a subscriber opt-in rule is associated with the selected subscriber data; and
retrieving the selected subscriber data if the subscriber opt-in rule is satisfied.
3. The method of claim 2 , wherein the subscriber opt-in rule is satisfied based on a subscriber opt-in response.
4. The method of claim 3 , further comprising determining a time-limit for receiving the subscriber opt-in response.
5. The method of claim 1 , further comprising maintaining the subscriber data in a cache memory.
6. The method of claim 1 , wherein the selected subscriber data includes at least one of subscriber profile, device property or location data.
7. The method of claim 1 , wherein the security condition comprises an authentication confidence indication.
8. The method of claim 1 , further comprising receiving the request from one of a Web-based provider portal, enterprise application or mobile application.
9. An apparatus comprising:
an application programming interface configured to receive a request from a third-party requestor to expose subscriber data; and
a subscriber data management element configured to:
maintain the subscriber data at a digital data storage, wherein the digital data storage is protected by a service provider firewall;
determine selected subscriber data and a security condition associated with the request;
determine a historical calling pattern and a historical location pattern of the third-party requestor, the historical calling pattern and the historical location pattern determined for a selected time period and relative to a stored location pattern associated with the third-party requestor;
request authentication information of the third-party requestor based on a result of the historical calling pattern and the historical location pattern of the third-party requestor determined relative to the stored location pattern associated with the third-party requestor;
determine a confidence level score representing a confidence level in a represented identity of the third-party requestor, wherein the confidence level score varies relative to a threshold confidence level score of the security condition based on one of a monitored characteristic of the third-party requestor and a determined location of the third-party requestor, and wherein the monitored characteristic includes the determined historical calling pattern, the previous historical location pattern, and the authentication information of the third party requestor;
responsive to a reduction in the confidence level score based upon the historical calling pattern and the historical location pattern, request additional authentication data from the third-party requestor in order to satisfy the threshold confidence level score;
selectively retrieve the selected subscriber data if the threshold confidence level score of the security condition is satisfied; and
transmit the selected subscriber data to the third-party requestor.
10. The apparatus of claim 9 , wherein the subscriber data management element is further configured to determine whether a subscriber opt-in rule is associated with the selected subscriber data; and
retrieve the selected subscriber data if the subscriber opt-in rule is satisfied.
11. The apparatus of claim 10 , wherein the subscriber opt-in rule is satisfied based on a subscriber opt-in response.
12. The apparatus of claim 11 , wherein the subscriber data management element is further configured to determine a time-limit for receiving the subscriber opt-in response.
13. The apparatus of claim 11 , wherein the subscriber data management element is further configured to update the subscriber opt-in rule based on the subscriber opt-in response.
14. The apparatus of claim 11 , wherein the subscriber data management element is further configured to generate a new subscriber opt-in rule based on the subscriber opt-in response.
15. The apparatus of claim 9 , wherein the subscriber data management element is further configured to maintain the subscriber data in a cache memory.
16. The apparatus of claim 9 , wherein the selected subscriber data includes at least one of subscriber profile, device property or location data.
17. The apparatus of claim 9 , wherein the security condition comprises an authentication confidence indication.
18. The apparatus of claim 9 , wherein the application programming interface is further configured to receive the request from one of a Web-based provider portal, enterprise application or mobile application.
19. An article of manufacture including a non-transitory computer-readable medium having instructions stored thereon, that in response to execution by a computing device causes the computing device to perform operations comprising:
at a processor communicatively coupled to a digital data storage, maintaining subscriber data at the digital data storage, wherein the digital data storage is protected by a service provider firewall;
receiving, via an application programming interface communicatively coupled to the processor, a request from a third-party requestor to expose the subscriber data;
determining, by the processor in cooperation with the digital data storage, selected subscriber data and a security condition associated with the request;
determining historical calling pattern and a historical location pattern of the third-party requestor, the historical calling pattern and the historical location pattern determined for a selected time period and relative to a stored location pattern associated with the third-party requestor;
requesting authentication information of the third-party requestor based on a result of the historical calling pattern and the historical location pattern of the third-party requestor determined relative to the stored location pattern associated with the third-party requestor;
determining a confidence level score representing a confidence level in a represented identity of the third-party requestor, wherein the confidence level score varies relative to a threshold confidence level score of the security condition based on one of a monitored characteristic of the third-party requestor and a determined location of the third-party requestor, and wherein the monitored characteristic includes the determined historical calling pattern, the previous historical location pattern, and the authentication information of the third party requestor;
responsive to a reduction in the confidence level score based upon the historical calling pattern and the historical location pattern, requesting additional authentication data from the third-party requestor in order to satisfy the threshold confidence level score;
selectively retrieving, by the processor in cooperation with the digital data storage, the selected subscriber data if the threshold confidence level score of the security condition is satisfied; and
transmitting, by the processor in cooperation with the digital data storage, the selected subscriber data to the third-party requestor.
20. The method of claim 1 , further comprising generating at least a portion of the selected subscriber data based on the retrieved selected subscriber data if at least a portion of the selected subscriber data is unavailable to a service provider receiving the request.
21. The apparatus of claim 9 , wherein the subscriber data management element is further configured to generate at least a portion of the selected subscriber data based on the retrieved selected subscriber data if at least a portion of the selected subscriber data is unavailable to a service provider receiving the request.