Method for privacy management in an identity network, physical entities and computer program therefor

A method carried out by a controller for privacy management in an identity network for at least one principal, wherein the identity network comprises a computer network including at least an identity provider, a discovery service provider, and a second service provider with which the principal can make transactions, and wherein a principal comprises a system entity whose identity can be authenticated, the method comprising:

• querying the discovery service provider, using a querying circuit, of the identity network to obtain identity resource information regarding the identity resources available in the identity network and associated with the principal's identity, wherein an identity resource comprises data related to an identity or group of identities, or a service associated with an identity or group of identities;
• receiving, from the discovery service provider using a first receiver, addressing information usable for addressing attributes of the identity resources available in the identity network and associated with the principal's identity;
• and
• interacting, based on the received addressing information using an interacting circuit, with the second service provider to create, read, modify, or delete a privacy attribute governing the use of an identity resource available in the identity network and associated with the principal's identity;
• wherein the privacy attribute specifies permissions associated with the identity resource with respect to operations that may be performed by system entities on, or in relation to, the identity resource;
• and
• wherein the querying circuit, the first receiver, and the interacting circuit comprise separate circuits within the controller.

A computer program product stored in a non-transitory computer-readable medium for an identity network, said computer program product comprising instructions which, when executed on a computer in the identity network, causes the identity network to implement privacy management operations for at least one principal, wherein the identity network comprises a computer network including at least an identity provider, a discovery service provider, and a second service provider with which the principal can make transactions, and wherein a principal comprises a system entity whose identity can be authenticated, wherein the computer program product comprises instructions to:

• query the discovery service provider, using a querying circuit, of the identity network to obtain identity resource information regarding identity resources available in the identity network and associated with the principal's identity, wherein an identity resource comprises data related to an identity or group of identities, or a service associated with an identity or group of identities;
• receive, from the discovery service provider using a first receiver, addressing information usable for addressing attributes of the identity resources available in the identity network and associated with the principal's identity;
• and
• interact, based on the received addressing information using an interacting circuit, with the second service provider to create, read, modify, or delete a privacy attribute governing the use of an identity resource available in the identity network and associated with the principal's identity;
• wherein the privacy attribute specifies permissions associated with the identity resource with respect to operations that may be performed by system entities on, or in relation to, the identity resource;
• and
• wherein the querying circuit, the first receiver, and the interacting circuit comprise separate circuits within the controller.