Method for Selectively Exposing Subscriber Data

Abstract

Methods, systems, and apparatuses for selectively exposing subscriber data include maintaining subscriber data at a digital data storage, wherein the digital data storage is protected by a service provider firewall. A request to expose subscriber data from a third-party requestor is received. Selected subscriber data and a security condition associated with the request are determined, wherein the security condition is based on an identity of the third-party requestor. The selected subscriber data is retrieved if the security condition is satisfied, and the selected subscriber data is transmitted to the third-party requestor.

We claim: 
     
         1 . A method comprising:
 receiving a request from a third-party requestor to expose subscriber data;   determining a security condition associated with the third-party requestor;   determining a historical calling pattern and a historical location pattern of the third-party requestor for a selected time period;   requesting authentication information of the third-party requestor based on the historical calling pattern and the historical location pattern of the third-party requestor;   determining a confidence level score representing a confidence level in a represented identity of the third-party requestor based at least on the historical calling pattern, the historical location pattern, and the authentication information; and   transmitting the subscriber data to the third-party requestor based on the confidence level score satisfying a threshold confidence level score of the security condition.   
     
     
         2 . The method of  claim 1 , further comprising:
 responsive to the confidence level score not satisfying the threshold confidence level score, requesting additional authentication information of the third-party requestor so that the confidence level score satisfies the threshold confidence level score.   
     
     
         3 . The method of  claim 1 , further comprising:
 determining whether a subscriber opt-in rule is associated with the subscriber data; and   transmitting the subscriber data based on the subscriber opt-in rule being satisfied.   
     
     
         4 . The method of  claim 3 , wherein the subscriber opt-in rule is satisfied based on a subscriber opt-in response. 
     
     
         5 . The method of  claim 1 , further comprising:
 determining whether at least some of the subscriber data includes sensitive subscriber data; and   in response to determining that at least some of the subscriber data includes sensitive subscriber data, transmitting the subscriber data based on a subscriber opt-in being satisfied.   
     
     
         6 . The method of  claim 1 , further comprising:
 pre-retrieving frequently exposed subscriber data; and   storing the frequently exposed subscriber data in cache memory.   
     
     
         7 . The method of  claim 1 , wherein the subscriber data includes at least one of a subscriber profile, device property, and location data. 
     
     
         8 . The method of  claim 1 , wherein the security condition comprises an authentication confidence indication. 
     
     
         9 . The method of  claim 1 , further comprising receiving the request from at least one of a Web-based provider portal, an enterprise application, and a mobile application. 
     
     
         10 . The method of  claim 1 , wherein at least a portion of the subscriber data is unavailable, the method further comprising:
 generating at least a portion of the unavailable subscriber data based on available subscriber data.   
     
     
         11 . An apparatus comprising:
 an application programming interface configured to receive a request from a third-party requestor to expose subscriber data; and   a subscriber data management element configured to:
 determine a security condition associated with the third-party requestor; 
 determine a historical calling pattern and a historical location pattern of the third-party requestor for a selected time period; 
 request authentication information of the third-party requestor based on the historical calling pattern and the historical location pattern of the third-party requestor; 
 determine a confidence level score representing a confidence level in a represented identity of the third-party requestor based at least on the historical calling pattern, the historical location pattern, and the authentication information; and 
 transmit the subscriber data to the third-party requestor based on the confidence level score satisfying a threshold confidence level score of the security condition. 
   
     
     
         12 . The apparatus of  claim 11 , wherein the subscriber data management element is further configured to:
 responsive to the confidence level score not satisfying the threshold confidence level score, requesting additional authentication information of the third-party requestor so that the confidence level score satisfies the threshold confidence level score.   
     
     
         13 . The apparatus of  claim 11 , wherein the subscriber data management element is further configured to:
 determine whether a subscriber opt-in rule is associated with the subscriber data; and   transmit the subscriber data based on the subscriber opt-in rule being satisfied.   
     
     
         14 . The apparatus of  claim 13 , wherein the subscriber opt-in rule is satisfied based on a subscriber opt-in response. 
     
     
         15 . The apparatus of  claim 14 , wherein the subscriber data management element is further configured to generate a new subscriber opt-in rule based on the subscriber opt-in response. 
     
     
         16 . The apparatus of  claim 11 , wherein the subscriber data management element is further configured to:
 determine whether at least some of the subscriber data includes sensitive subscriber data; and   in response to determining that at least some of the subscriber data includes sensitive subscriber data, transmit the subscriber data based on a subscriber opt-in being satisfied.   
     
     
         17 . The apparatus of  claim 11 , wherein the subscriber data management element is further configured to:
 pre-retrieve frequently exposed subscriber data; and   store the frequently exposed subscriber data in cache memory.   
     
     
         18 . An article of manufacture including a non-transitory computer-readable medium having instructions stored thereon, that in response to execution by a computing device causes the computing device to perform operations comprising:
 receiving a request from a third-party requestor to expose subscriber data;   determining a security condition associated with the third-party requestor;   determining a historical calling pattern and a historical location pattern of the third-party requestor for a selected time period;   requesting authentication information of the third-party requestor based on the historical calling pattern and the historical location pattern of the third-party requestor;   determining a confidence level score representing a confidence level in a represented identity of the third-party requestor based at least on the historical calling pattern, the historical location pattern, and the authentication information; and   transmitting the subscriber data to the third-party requestor based on the confidence level score satisfying a threshold confidence level score of the security condition.   
     
     
         19 . The article of manufacture of  claim 18 , further comprising:
 responsive to the confidence level score not satisfying the threshold confidence level score, requesting additional authentication information of the third-party requestor so that the confidence level score satisfies the threshold confidence level score.   
     
     
         20 . The article of manufacture of  claim 18 , wherein at least a portion of the subscriber data is unavailable, the operations further comprising:
 generating at least a portion of the unavailable subscriber data based on available subscriber data.