System and method of mapping and protecting communication services with OAuth

摘要

In accordance with various embodiments, systems and methods which allow mapping and protecting communication services and granular access to subscriber information. Such a system can include a plurality of applications, executing on one or more application servers. The system can also include a services gatekeeper which is operable to intercept requests for access to communication services, obtain scoped authorization from a subscriber for access to specified communication services, and enable access to the specified communication services in accordance with the scope authorized by the subscriber.

主权项

1. A system for providing scoped access to subscriber information of a subscriber, comprising:
an authorization server, executing on one or more processors; a plurality of communication services, wherein each communication service includes one or more interfaces, wherein each interface includes one or more methods; a flexible data structure, wherein the flexible data structure maps each of the interfaces and methods of a communication service to a resource identifier, wherein the resource identifier and one or more parameters associated therewith identify a scope of information of the subscriber exposed by the communication service; wherein the authorization server, when receiving a request including a resource identifier, for accessing the communication service, operates to
obtain an authorization from the subscriber to access the communication service; andin response to receiving said authorization from said subscriber, issue an access token granting access to a particular scope of the information of the subscriber identified by the resource identifier in the request and one or more parameters associated therewith.