MANAGING ACCESS TO USER IDENTITIES
A system, method, and computer-implemented method of managing user identities for data control is disclosed. The computer-implemented method is executed in a data processing system comprising a processing device and a memory comprising instructions which are executed by the processing device. The method includes creating a user identity graph, the user identity graph containing entries associated with user identities on a device, with the user identities relating to a user of the device. The method includes detecting an installation of an application on the device. The method includes generating an entry in a user identity graph relating to the application. The method includes receiving a consent instruction from the user relating to the application. The method includes updating the user identity graph based on the consent instruction.
1 . A computer-implemented method of managing user identities for data control in a data processing system comprising a processing device and a memory comprising instructions which are executed by the processing device, the computer-implemented method comprising:
creating a user identity graph, wherein the user identity graph comprises entries associated with user identities on a device, the user identities relating to a user of the device;
detecting an installation of an application on the device;
generating an entry in a user identity graph relating to the application;
receiving a consent instruction from the user relating to the application; and
updating the user identity graph based on the consent instruction.
2 . The computer-implemented method of claim 1 , wherein the consent instruction is an acceptance of authorization, and wherein the updating the user identity graph further comprises:
creating a connection between the entry and a first third-party user identity of the user identities.
3 . The computer-implemented method of claim 2 , further comprising:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance of authorization from the user relating to the another application; and
creating a connection between the another entry and the first third-party user identity of the user identities.
4 . The computer-implemented method of claim 2 , further comprising:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance authorization from the user relating to the another application; and
creating a connection between the another entry and a second third-party user identity of the user identities.
5 . The computer-implemented method of claim 2 , further comprising:
receiving another consent instruction from the user relating to the application, the another consent instruction being a reset of authorization; and
severing the connection between the entry and the first third-party user identity.
6 . The computer-implemented method of claim 5 , wherein the severing the connection between the entry and the first third-party user identity comprises deleting the entry.
7 . The computer-implemented method of claim 1 , wherein the consent instruction is a denial of authorization, and wherein the updating the user identity graph further comprises:
denying a connection between the entry and a third-party user identity.
8 . A computer program product configured to perform a process to manage user identities for data control, the process comprising:
creating a user identity graph, wherein the user identity graph comprises entries associated with user identities on a device, the user identities relating to a user of the device;
detecting an installation of an application on the device;
generating an entry in a user identity graph relating to the application;
receiving a consent instruction from the user relating to the application; and
updating the user identity graph based on the consent instruction.
9 . The computer program product of claim 8 , wherein the consent instruction is an acceptance of authorization, and wherein the updating the user identity graph further comprises:
creating a connection between the entry and a first third-party user identity of the user identities.
10 . The computer program product of claim 9 , further comprising:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance of authorization from the user relating to the another application; and
creating a connection between the another entry and the first third-party user identity of the user identities.
11 . The computer program product of claim 9 , further comprising:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance authorization from the user relating to the another application; and
creating a connection between the another entry and a second third-party user identity of the user identities.
12 . The computer program product of claim 9 , further comprising:
receiving another consent instruction from the user relating to the application, the another consent instruction being a reset of authorization; and
severing the connection between the entry and the first third-party user identity.
13 . The computer-implemented method of claim 12 , wherein the severing the connection between the entry and the first third-party user identity comprises deleting the entry.
14 . The computer program product of claim 8 , wherein the consent instruction is a denial of authorization, and wherein the updating the user identity graph further comprises:
denying a connection between the entry and a third-party user identity.
15 . A system of managing user identities for data control comprising a processing device and a memory comprising instructions that are executed by the processor to perform a method comprising:
creating a user identity graph, wherein the user identity graph comprises entries associated with user identities on a device, the user identities relating to a user of the device;
detecting an installation of an application on the device;
generating an entry in a user identity graph relating to the application;
receiving a consent instruction from the user relating to the application; and
updating the user identity graph based on the consent instruction.
16 . The system of claim 15 , wherein the consent instruction is an acceptance of authorization, and wherein the updating the user identity graph further comprises:
creating a connection between the entry and a first third-party user identity of the user identities.
17 . The system of claim 16 , wherein the method further comprises:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance of authorization from the user relating to the another application; and
creating a connection between the another entry and the first third-party user identity of the user identities.
18 . The system of claim 16 , wherein the method further comprises:
detecting an installation of another application on the device;
generating another entry in the user identity graph relating to the another application;
receiving another acceptance authorization from the user relating to the another application; and
creating a connection between the another entry and a second third-party user identity of the user identities.
19 . The system of claim 16 , wherein the method further comprises:
receiving another consent instruction from the user relating to the application, the another consent instruction being a reset of authorization; and
severing the connection between the entry and the first third-party user identity.
20 . The system of claim 15 , wherein the consent instruction is a denial of authorization, and wherein the updating the user identify graph further comprises:
denying a connection between the entry and a third-party user identity.