Method and device for obtaining, managing, and verifying user consent for external provision of user data analysis information
Provided are a method and device for obtaining, managing, and verifying user consent for external provision of user analytics. Unified data management (UDM) receives, from a network data analytics function (NWDAF), a first request message for whether consent of a specific user has been received with respect to data request collection for the specific user, which is requested by an application function (AF), and transmitting a first response message including a parameter indicating the presence or absence of user consent to the NWDAF. In this case, the parameter indicates that there is no consent of the specific user. The UDM also receives, from the AF, a second request message including an ID of the specific user, consent acquired from the specific user, and HASH, and updating the parameter indicating the presence or absence of user consent, based on the consent acquired from the specific user.
1. A method comprising;
for a data request collection for a specific user requested by an application node, receiving, from a network data analytics node, a first request message about whether consent has been received from the specific user, wherein the first request message includes an identifier (ID) of the specific user;
determining subscription information of the specific user based on the ID of the specific user;
in response to the first request message, transmitting, to the network data analytics node, a first response message including a user consent parameter stored in the subscription information of the specific user, wherein the user consent parameter informs that the specific user does not have consent;
receiving, from the application node, a second request message including the ID of the specific user, the consent obtained from the specific user, and a HASH;
checking integrity of the consent obtained from the specific user by verifying the HASH;
updating the user consent parameter stored in the subscription information of the specific user based on the consent obtained from the specific user; and
in response to the second request message, transmitting, to the application node, a second response message informing that the subscription information of the specific user has been updated.
2. The method of claim 1 , wherein the data request collection for the specific user includes collecting information about mobility of the specific user and/or information about communication behavior of the specific user.
3. The method of claim 1 , wherein the consent of the specific user is checked and stored when the subscription information of the specific user is created.
4. The method of claim 1 , wherein the user consent parameter has a default value of “non-consent”.
5. The method of claim 1 , wherein, based on absence of the consent from the specific user, the method further comprises checking whether the specific user has consent via an Access and mobility Management Function (AMF).
6. The method of claim 1 , wherein the data request collection for the specific user requested by the application node is rejected by the NWDAF network data analytics node based on the absence of the consent from the specific user.
7. The method of claim 1 , wherein the method further comprises:
after transmitting the second response message to the application node,
receiving, from the network data analytics node, a third request message for the data request collection for the specific user requested by the application node; and
in response to the third request message, transmitting, to the network data analytics node, a third response message including an updated user consent parameter.
8. The method of claim 7 , wherein data for the specific user requested by the application node is forwarded from the NWDAF network data analytics node to the application node.
9. The method of claim 1 , wherein the application node is a service provider outside a 5G core network.
10. A method comprising:
based on absence of prior consent to a data request collection for a user equipment (UE), receiving, from an application node, a request for consent to the data request collection; and
based on consenting to the data request collection, transmitting a message, to the application node, informing consent to the data request collection, together with a HASH for verifying integrity of the message.
11. The method of claim 10 , wherein the HASH is generated based on a secret key and a Key Derivation Function (KDF) used for registration in a 5G core network.
12. The method of claim 1 , wherein the UE is in communication with at least one of a mobile device, a network, and/or autonomous vehicles other than the UE.
13. A user equipment (UE) comprising:
at least one transceiver;
at least one processor; and
at least one memory operably connectable to the at least one processor and storing instructions that, based on being executed by the at least one processor, perform operations comprising:
based on absence of prior consent to a data request collection for the UE, receiving, from an application node via the at least one transceiver, a request for consent to the data request collection; and
based on consenting to the data request collection, transmitting a message, to the application node via the at least one transceiver, informing consent to the data request collection, together with a HASH for verifying integrity of the message.
14. The UE of claim 13 , wherein the HASH is generated based on a secret key and a Key Derivation Function (KDF) used for registration in a 5G core network.