Automatable secure submission of confidential user information over a computer network

• US 20020120864A1
• Filed: 12/13/2000
• Published: 08/29/2002
• Est. Priority Date: 12/13/2000
• Status: Abandoned Application

• Current Assignee: Propel Software Corporation (GlobalPOPs, Inc.)
• Original Assignee: Propel Software Corporation (GlobalPOPs, Inc.)
• Inventors: Kline, Charles, Kirsch, Steven T., Wu, Jackie Zhanhong, Rose, William W., Natarajan, Satish, Wyllie, Russell D.
• Application Number:
  US09/738,474
• Publication Number:
  US 20020120864A1
• Time in Patent Office: Days
• US Class Current: 713/201
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 2221/2115 Third party
• CPC Class Codes: G06Q 20/403 Solvency checks

Abstract

A repository server system supports one-click retrieval of user data over a communications network in fulfillment of the data requirements of a Web page form served to a user computer system by a Web page server. The repository server system includes a data store that stores user data. The repository server system provides the Web page form with a clickable user interface control to the user computer system. The control encompasses a user data request, issuable by the user computer system and that corresponds to the Web page form. The repository server system is responsive to the user data request to provide a user data response, corresponding to the user data request, to the user computer system.

Claims

1. A repository server system supporting a one-click retrieval of user data over a communications network in fulfillment of the data requirements of a Web page form served to a user computer system by a Web page server, wherein said repository server system includes a data store that stores user data, wherein said repository server system provides said Web page form with a clickable user interface control as served to said user computer system, said control including a user data request, issuable by said user computer system and corresponding to said Web page form, wherein said repository server system is responsive to said user data request to provide a user data response, corresponding to said user data request, to said user computer system.

2. The repository server system of claim 1 wherein said user data request identifies a mapping between data stored by said data store and said Web page form.

3. The repository server system of claim 2 wherein said mapping is comprehensive relative to said user data request.

4. The repository server system of claim 3 wherein the data requirements of said Web page form are defined independent of the form of said user data as stored by said repository server system and wherein said repository server system provides said user data in conformance with said user data request.

5. A method of securely submitting confidential user information from a repository server to a client server over a communications network, said method comprising the steps of:

a) encoding a specification of client requested user data in a Web page served, by the request of a user, from a client server to a user computer system, wherein said specification defines a non-identity named data correspondence between said client requested user data and user data stored by said repository server;

b) enabling said user to issue, by a single click, a data request including said specification to said repository server; and

c) providing a data response from said repository server providing user data consistent with said specification.

6. The method of claim 5 wherein said client requested data is defined by said client server and wherein said method further comprises the step of determining a named data correspondence between user data defined by said client server and user data stored by said repository server.

7. The method of claim 6 wherein said step of determining includes identifying data conversions that implement said non-identity named data correspondence between said client requested user data and user data stored by said repository server.

8. The method of claim 7 wherein data conversions performed to implement said non-identity named data correspondence in response to receipt of said data request by said repository server are performed autonomously, whereby there is an identity correspondence between said single click and provision of said data response.

9. The method of claim 8 wherein said specification includes an identification of said client server and wherein said repository server provides for the autonomous authentication of said client server and said user with respect to said specification as issued by said user computer system.

10. A system enabling a one-click logon of a user onto a partner site where said user has an account with a repository server system, said system comprising a repository server coupleable to a communications network to receive a first coded message from a user site, wherein said coded message includes a partner site identification provided from said partner site, a user account identification, and a mapped identification of partner-site fields to be filled, said repository server providing for the verification of said partner site identification and said user account identification, and wherein said repository server selectively generates a second coded message directed to said partner-site containing login information appropriate to complete the logon of said user onto said partner site.

11. The system of claim 11 wherein said repository server operates to validate said user account identification against information held by said repository server specific to said user and said partner site identification against information held by said repository server specific to said partner site and wherein said repository server generates said second coded message based on information held in said user account that correlates to said partner site.

13. The method of claim 12 wherein said control is activatable by a predetermined action performed by a user of said user computer system.

14. The method of claim 13 wherein said predetermined action is a single click by said user on said control.

15. The method of claim 13 wherein said step of second providing includes the step of authenticating said partner site system and said user computer system with respect to said coded request message.

17. The method of claim 16 wherein said coded request is associated with a coded control provided on said Web page and wherein said action is an operation executed on said user computer system on said coded control.

18. The method of claim 17 wherein said coded control is a user interface control provided on said Web page and wherein said action is a single click by a user of said user computer system on said user interface control.

19. The method of claim 18 wherein said coded request is constructed with an identification of said data repository system, said client computer system, and said Web page to securely identify said client computer system and to identify said first user data to said data repository system.

12. A method of enabling the secure submission of confidential user information to a partner site computer system comprising the steps of:

a) first providing, in response to the activation of a control associated with a Web page served to a user computer system provided by said partner site computer system, a coded request message for confidential information to a predefined repository server system; and

b) second providing, in response to receipt of said coded request message, a response message from said predefined repository server system containing a release set of confidential user information to said user computer system.

16. A method supporting the submission of user information to a client computer system over communications network comprising the steps of:

a) providing, from a client computer system to a user computer system, a coded request for first user data associated with a Web page;

b) forwarding said coded request, selectively based on action performed on said user computer system relative to said Web page, to a data repository system;

c) receiving, by said user computer system, a coded response from said data repository system including second user data; and

d) providing, by said user computer system, said second user data to said client computer system relative to said Web page.

20. A method supporting the autonomous submission of user data to a client computer system over a communications network, said method comprising the steps of:

a) issuing, in response to a single user click on a user interface control provided on a Web page served from a client computer system, a user data request determined by said client computer system specific to said Web page from said user computer system to a data repository system over said communications network; and

b) returning, subject to the secure identification of said client computer system and said user computer system relative to said user data request, user data corresponding to said user data request.

21. The method of claim 20 wherein said step of returning is further subject to the limitations of the data stored by said data repository system.

22. The method of claim 21 further comprising the steps of:

a) requesting by said data repository system, prior to said step of returning, additional data from said user computer system; and

b) storing said additional data by said data repository system.

23. The method of claim 22 wherein said step of requesting occurs subsequent to said step of issuing and wherein said additional data is responsive to a portion of said user data request.

24. The method of claim 23 wherein said additional data includes data signifying an approval to provide user data to said client computer system.