Method of providing user-specific data to an information source, a data carrier and a method of personalising a user's Internet experience

• US 20030012384A1
• Filed: 07/12/2002
• Published: 01/16/2003
• Est. Priority Date: 07/12/2001
• Status: Abandoned Application

• Current Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Original Assignee: Hewlett-Packard Development Company, L.P. (HP Inc.)
• Inventors: Brebner, Gavin, Vicard, Dominique
• Application Number:
  US10/194,974
• Publication Number:
  US 20030012384A1
• Time in Patent Office: Days
• US Class Current: 380/277
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A method of providing user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the data being conveyed in encrypted form and wherein the data key used to provide the information source with unencrypted data is obtained using a broker.

Claims

1. A method of providing user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the data being conveyed in encrypted form and wherein the data key used to provide the information source with unencrypted data is obtained using a broker.

2. A method according to claim 1 wherein the encrypted data is conveyed using the broker.

3. A method according to claim 1 wherein the broker forwards the data to the information source without disclosing the origin of the data.

4. A method according to claim 1 wherein the data key is symmetric and is deposited with the broker in encrypted form

5. A method according to claim 4 wherein the data key is encrypted using a private exchange key

6. A method according to claim 4 wherein the data key is decrypted using a public exchange key, conveyed with the data.

7. A method according to claim 1 wherein the information is encrypted prior to being returned to a user.

8. A method according to claim 7 wherein the information is encrypted using a symmetric information key.

9. A method according to claim 8 wherein the information key is encrypted using a public exchange key.

10. A method according to claim 8 wherein the information key is decrypted using a private exchange key.

11. A method according to claim 6 wherein the encrypted data and the public exchange key are conveyed in or using a carrier.

12. A method according to claim 11 wherein the carrier is a software agent.

13. A method according to claim 12 wherein the agent interacts with the information source and divulges user-specific data in response to queries from or on behalf of the information source.

14. A method according to claim 1 wherein the data comprises a plurality of data sets and wherein each set can only be decrypted with a set-specific data key.

15. A method according to claim 12 wherein the broker transmits a data key to the agent in response to a request from the agent, the request including a source identifier whereby the identity of the information source may be established.

16. A method according to claim 15 wherein the broker logs each such request.

17. A method according to claim 1 wherein the broker is authorised to transmit the data key for a limited period, after which key requests will not be complied with.

18. A method according to claim 1 wherein the data key is rendered inoperative subsequent to the unencrypted data being divulged.

19. A method according to claim 18 wherein the data key is rendered inoperative by the agent, by destroying, overwriting or otherwise corrupting the data key.

20. A method according to claim 12 wherein the agent carries out an integrity check prior to be conveyed to the broker.

21. A method according to claim 20 wherein the integrity check comprises generating an agent digest and comparing the digest with a trusted control digest.

22. A method according to claim 21 wherein the control digest is held by a certification authority.

23. A method according to claim 22 wherein the digest is passed to the certification authority in encrypted form, the digest being encrypted using a private integrity key and decrypted by the certification authority using a public integrity key.

25. A method according to claim 24 wherein the key source is operative to release the data key in response to predetermined request criteria.

27. A method according to claim 26 wherein the carrier is an agent and the module is an Application Program Interface.

28. A method according to claim 26 wherein the module is operative to obtain, from a third party, a data key, whereby the unencrypted data may be divulged to the information source.

24. A method of providing user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the data being conveyed in encrypted form and wherein the data key used to provide the information source with unencrypted data is released from a key source only when the key source is appropriately authorised to do so.

26. A data carrier for use in providing encrypted user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the carrier comprising a module operative, in response to queries dispatched by or on behalf of the information source, to divulge unencrypted user-specific data to or for use by the information source.

29. A method of providing user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the data being conveyed in encrypted form in or using a carrier, the carrier comprising a module, which in response to queries dispatched by or on behalf of the information source, divulges unencrypted user-specific data to or for use by the information source.

30. A method of personalising a user'"'"'s Internet experience comprising conveying, with or in conjunction with a web page request, a carrier comprising user-specific data in encrypted form, the carrier comprising a module operative, in response to queries dispatched by or on behalf of the web page content provider, to divulge unencrypted user-specific data, whereby the page returned may be tailored in accordance with the user-specific data.

31. A method according to claim 30 wherein the carrier is conveyed via a broker, the broker being operative to forward the carrier to an appropriate web server without disclosing to the server the origin of the data.

32. A method according to claim 30 wherein the carrier is a software agent.

33. A method of providing user-specific data to an information source to enable the information to be obtained in accordance with the user-specific data, the data being conveyed in encrypted form, the data key used to provide the information source with unencrypted data being obtained using a broker and wherein the data key is conveyed using a carrier in the form of a software agent.