Method and system for authorizing access to user information in a network

An apparatus comprising:

• a receiver configured to receive a request from a source for information of a user;
• a verifier configured to verify that the source is authorized to receive the information, wherein the verifier is further configured to
• compare the source of the request against non-barred public user identities of the user,
• compare the source of the request against network entities identified in a path header contained in a previous request;
• and
• a generator configured to generate a response authorizing the request if the source is authorized to receive the information.

An apparatus comprising:

• receiving means for receiving a request at a network entity from a source for information of a user;
• verifying means for verifying that the source is authorized to receive the information;
• and
• generating means for generating a response authorizing the request if the source is authorized to receive the information,
• wherein the verifying means further comprises comparing means for comparing the source of the request against non-barred public user identities of the user and for comparing the source of the request against network entities identified in a path header contained in a previous request.

A computer program, stored on a computer readable medium, the computer program configured to control a processor to perform a method comprising:

• receiving a request at a network entity from a source for information of a user;
• verifying that the source is authorized to receive the information;
• and
• generating a response authorizing the request if the source is authorized to receive the information,
• wherein the verifying further comprises comparing the source of the request against non-barred public user identities of the user and comparing the source of the request against network entities identified in a path header contained in a previous request.