System and method of securing sharing of resources which require consent of multiple resource owners using group URI's

A method for providing group access to user information of members of a group, comprising:

• (a) providing an authorization service, executing on one or more processors;
• (b) providing a data structure, wherein the data structure maps a set of member identifiers to a group owner and a group owner identifier;
• (c) receiving a request to access a communication services API associated with the group owner identifier, wherein the communications services API is a location API;
• (d) obtaining authorization from the group owner associated with the group owner identifier to satisfy the request to access the location API for all members of the group;
• and
• (e) in response to receiving said authorization from said group owner, issuing an access token granting access to said location API with respect to user location information for all members of the group.

A non-transitory computer readable storage medium including instructions stored thereon which, when executed by a computer, cause the computer to perform the steps comprising:

• using a group module to specify a group URI and a group owner and a group container identifying each member of a group;
• providing a data structure, wherein the data structure maps a set of member identifiers to the group owner and a group owner identifier;
• receiving a request to access a communication services API associated with the group owner identifier;
• obtaining authorization from the group owner associated with the group owner identifier to satisfy the request to access the communication services API for all members of the group;
• and
• in response to receiving said authorization from said group owner, issuing an access token granting access to said communication services API with respect to user information for all members of the group.

A method for providing group access to user information of members of a group, comprising:

• (a) providing an authorization service, executing on one or more processors;
• (b) providing a data structure, wherein the data structure maps a set of member identifiers to a group owner and a group owner identifier;
• (c) receiving a request to access a communication services API associated with the group owner identifier, wherein the communications services API is a presence API;
• (d) obtaining authorization from the group owner associated with the group owner identifier to satisfy the request to access the presence API for all members of the group;
• and
• (e) in response to receiving said authorization from said group owner, issuing an access token granting access to said presence API with respect to user presence information for all members of the group.

A non-transitory computer readable storage medium including instructions stored thereon which, when executed by a computer, cause the computer to perform the steps comprising:

• providing an authorization service, executing on one or more processors;
• providing a data structure, wherein the data structure maps a set of member identifiers to a group owner and a group owner identifier;
• receiving a request to access a communication services API associated with the group owner identifier, wherein the communication services API is a location API enabling access to user location information;
• obtaining authorization from the group owner associated with the group owner identifier to satisfy the request to access the location API for all members of the group;
• and
• in response to receiving said authorization from said group owner, issuing an access token granting access to said location API with respect to user location information for all members of the group.

A non-transitory computer readable storage medium including instructions stored thereon which, when executed by a computer, cause the computer to perform the steps comprising:

• providing an authorization service, executing on one or more processors;
• providing a data structure, wherein the data structure maps a set of member identifiers to a group owner and a group owner identifier;
• receiving a request to access a communication services API associated with the group owner identifier, wherein the communication services API is a presence API enabling access to user presence information;
• obtaining authorization from the group owner associated with the group owner identifier to satisfy the request to access the presence API for all members of the group;
• and
• in response to receiving said authorization from said group owner, issuing an access token granting access to said presence API with respect to user presence information for all members of the group.