Enhanced method of control or management of user related data subject to user consent
Systems, methods, apparatuses, and computer program products for supporting user consent management, tracking of user specific data and UE specific data requiring user consent, and distributing information about revocation of the user consent to involved network entities, are provided.
1 . A network apparatus, comprising:
at least one processor; and
at least one memory comprising computer program code, the at least one memory and the computer program code configured, with the at least one processor, to cause the network apparatus at least to:
control or manage user related data;
register with a unified data management (UDM) or data repository to be notified about changes in subscription information related to user consent;
track data requests, analytic requests, and data responses that are related to the user consent;
obtain or receive a data request from a data consumer, the data request configured to target a data source;
store a record about data requested in the data request;
check a validity of the user consent by checking with the UDM or data repository to learn about user consent information availability in subscription information, and values of the user consent stored in the UDM or data repository;
obtain, based on the data request being subject to user consent, information on whether the user consent is available for user data requested in the data request and valid for user data requested in the data request,
wherein the information is obtained by checking the validity of the user consent based on already obtained knowledge from a previous request and a handshake procedure with the data source;
allow, based on the user consent being available and valid, the data source to provide a data response with the requested data to the data consumer,
serve as a proxy for the data response;
wherein the data response comprises a validity time indicating a duration over which the user consent is valid;
store the validity time together with the requested data,
receive, from the data consumer or the data source, a notification about the requested data or about data that was provided to the data consumer;
store a record of the data provided in the data response;
receive a notification from the UDM or data repository that the user consent has been updated, changed or revoked by a user, wherein the notification includes information about conditions related to the user consent;
determine whether the data consumer is to be notified of the user consent update, change or revocation based on whether the data consumer had received some data that is affected by the user consent update, change or revocation;
upon determining that the data consumer is to be notified of the user consent update, change or revocation, notify the data consumers to delete data related to the user that has revoked, changed or updated their consent;
receive a confirmation from the data consumer to confirm that the data related to the user that has revoked, changed or updated their consent has been deleted; and
update the validity time,
wherein the network apparatus comprises a network function (NF), a first data source, a data consumer, a first data collection coordination function (DCCF), a network data analytics function (NWDAF), and a user related data controlling function (URDCF),
wherein the network apparatus is configured as a proxy on a data request path, a proxy on a data response path, and a proxy on a data collection path between the data consumer and the data source, and
wherein the network apparatus is co-located with a second DCCF and a second data source.