System and methods for flexible, controlled access to secure repository server stored information

• US 20020112153A1
• Filed: 12/13/2000
• Published: 08/15/2002
• Est. Priority Date: 12/13/2000
• Status: Abandoned Application

• Current Assignee: Propel Software Corporation (Apple Inc.)
• Original Assignee: Propel Software Corporation (Apple Inc.)
• Inventors: Kline, Charles, Kirsch, Steven T., Wu, Jackie Zhanhong, Rose, William W., Natarajan, Satish, Wyllie, Russell D.
• Application Number:
  US09/738,455
• Publication Number:
  US 20020112153A1
• Time in Patent Office: Days
• US Class Current: 713/153
• CPC Class Codes: H04L 2463/102 applying security measure for e-commerce
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32

Abstract

A repository server system supports a user in submission of confidential user information through client Web page forms served to user computer systems. A data store contains user data referenceable by a first set of names. The repository server processor is coupled to the data store and coupleable to a communications network to receive a user data request from a user computer system, where the user data request includes a client specification of the user data requested to complete the client Web page form. The client specification identifies user data by a second set of names. The processor provides for the conversion of user data stored in correspondence with the first set of names to a form corresponding with the second set of names.

Claims

1. A repository server system supporting submission of confidential user information through Web page forms served to user computer systems, said repository server system comprising:

a) a data store containing user data referenceable by a first set of names; and

b) a processor coupled to said data store and coupleable to a communications network for receiving a user data request from a user computer system, wherein said user data request includes a client specification of user data requested to complete a Web page form, wherein said client specification identifies user data by a second set of names, and wherein said processor provides for the conversion of user data stored in correspondence with said first set of names to a form corresponding with said second set of names.

2. The repository server system of claim 1 wherein the conversion of user data stored in correspondence with said first set of names is performed in response to receipt of said user data request.

3. The repository server system of claim 2 wherein said client specification includes an identification of a defined correspondence between said first and second sets of names.

4. The repository server system of claim 3 wherein said defined correspondence establishes a mapping between said first and second set of names.

5. The repository server system of claim 4 wherein said mapping identifies conversion functions to be applied to user data corresponding to said first set of names to provide user data corresponding to said second set of names.

6. The repository server system of claim 5 wherein said mapping identifies a conversion function through an aliased name within said first set of names.

7. The repository server system of claim 6 wherein said mapping is stored by said repository server system.

8. A server system, operable in connection with a central repository of confidential user data, to support the selective distribution of confidential user-information to authorized partner sites, which have specific confidential user data requirements, said server system comprising:

a) a connection to a database storing confidential user data within a user account and wherein datums of confidential user data are selectable based on an account identification and server datum identifications; and

b) a computer system, coupleable to a communications network and, through said connection, to said database, said computer system being responsive to a network request received from a partner site, wherein said network request provides said account identification and said server datum identifications, wherein said server datum identifications have a mapped relationship to the confidential user-information requirements of said partner site with respect to said user account, which is expressed as partner datum identifications, and wherein said computer system supports the determination of said mapped relationship for said partner site and provides for the generation and distribution of a mapped relationship definition to said partner site for use in providing said network request.

9. The server system of claim 8 wherein said mapped relationship definition implements said mapped relationship in a form evaluatable by said server system upon receipt as part of said network request, said server system providing a network response to said partner site containing the datums of confidential user-information corresponding to said partner datum identifications.

10. The server system of claim 9 further comprising a mapping processor, coupled to receive said mapped relationship definition, that implements combinatorial and logical functions to autonomously convert server datums to partner datums through a process defined by said mapped relationship definition.

11. The server system of claim 10 wherein said mapped relationship definition is generated and distributed to said partner site packaged to be sent as part of said network request in response to a single click on said partner site.

12. The server system of claim 11 wherein said computer system is coupleable through said communications network to a client system operated by a user, wherein said server system establishes a user account identification on said client system, and wherein said client system autonomously provides said user account identification to said server system in connection with said network request.

15. The repository server system of claim 14 wherein said processor is responsive to said form data request to securely identify said third-party server with respect to said form data request and to provide said form data response.

16. The repository server system of claim 15 wherein said form data request is issued by a user computer system and wherein said form data response is returned to said user computer system to provide said confidential user-information data to said third-party server.

17. The repository server system of claim 16 wherein said processor provides for the conversion of said confidential user-information data to produce instances of said confidential user-information data corresponding to the defined data formats of the named form fields.

18. The repository server system of claim 17 wherein a portion of said selective mapping is stored by said database and wherein said portion is referenced by said form data request.

19. The repository server system of claim 18 wherein said portion includes named aliases identifying corresponding conversion functions for the conversion of said confidential user-information data to produce instances of said confidential user-information data corresponding to the defined data formats of the named form fields.

13. A repository server system that manages the selective release of confidential user-information to third-party computer systems on behalf of a user, said repository server system comprising:

a) a database storing confidential user-information; and

b) a processor responsive to a data request received over a wide-area communications network, said data request including a first identification of a data requesting said third-party computer system, a second identification of the user whose confidential user-information is being requested, and a third identification of the data being requested, wherein said processor requires verification that said first identification corresponds to a valid third-party account on said repository server system, that said second identification corresponds to a valid user account on said repository server system, and that a profile, representing a pre-selected subset of said user'"'"'s confidential user-information, exists within said valid user account and is enabled with respect to said third-party computer system, and wherein said processor provides a response to said data request limited to containing the requested confidential user-information contained within said pre-selected subset.

14. A repository server system storing confidential user-information for selective distribution, on behalf of a user, through a communications network to a third-party server system to enable autonomous form data fill-in of named form fields having third-party server defined data formats, said repository server system comprising:

a) a database storing confidential user-information data in named data fields; and

b) a processor coupleable to said database to obtain access to said confidential user-information and coupleable to a communications network to receive a form data request prepared by a third-party server, wherein said form data request includes a predefined selective mapping of named form fields relative to said named data fields, wherein said processor operates over said selective mapping to access said confidential user-information data and produce instances of said confidential user-information data corresponding to the defined data formats of the named form fields, and wherein said processor returns a form data response containing said confidential user-information data corresponding to the defined data formats of the named form fields.

20. A method of enabling a client computer system to define a set of user data autonomously returned through a Web page form by a user of a user computer system, said method comprising the steps of:

a) storing, by a repository server that commumicates with said user computer system via a communications network, user-data in a first format;

b) enabling the conversion of user-data stored by said repository server to a second format; and

c) processing a request for user data specific to said Web page form to provide user data in said second format, wherein said request identifies a set of conversions between said first and second formats.