Online repository for personal information

• US 20050065950A1
• Filed: 11/12/2004
• Published: 03/24/2005
• Est. Priority Date: 01/07/2000
• Status: Abandoned Application

• Current Assignee: Damayanti Chaganti, Naren Chaganti, Sitapathi Rao Chaganti
• Original Assignee: Damayanti Chaganti, Naren Chaganti, Sitapathi Rao Chaganti
• Inventors: Chaganti, Naren, Chaganti, Damayanti, Chaganti, Sitapathi Rao
• Application Number:
  US10/987,917
• Publication Number:
  US 20050065950A1
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

A method and system for securely storing and disbursing a first party'"'"'s personal information to authorized requesters is described. Each information object is assigned a security classification level. When a second party requests information, based on the second party'"'"'s status, an authorized portion of the first party'"'"'s personal information is released to the second party. Changes to the first party'"'"'s personal information are transmitted to designated entities. Also described is a method whereby changes are effective at a future date and information as to when the changes would be effective may be transmitted to designated entities.

Claims

1. A method of selectively disbursing a first party'"'"'s personal information, the method comprising the steps of:

storing the first party'"'"'s information on a server computer, the first party'"'"'s personal information comprising a plurality of information objects;

assigning a first classification to a first information object;

assigning a second classification to a second information object; and

assigning a third classification to a third information object.

2. The method of claim 1 further comprising the step of:

permitting a second party to access the second information object but not the first information object.

3. The method of claim 1 further comprising the step of:

designating a first list of persons or entities permitted to access the second information object but not the first information object.

4. The method of claim 1 further comprising the step of:

responsive to a request from a browser program running on a client computer, permitting selective access to the first party'"'"'s personal information.

5. The method of claim 1 further comprising the step of:

receiving a request via a packet switched network; and

permitting selective access to the first party'"'"'s information.

6. The method of claim 1 further comprising the step of:

recording every access of the first party'"'"'s information to form an audit trait.

7. A method of permitting selective access to a first party'"'"'s personal information, the method comprising the steps of:

storing the first party'"'"'s personal information, the first party'"'"'s personal information comprising a plurality of information objects;

assigning at least one of a plurality of security levels to each information object; and

transmitting a selected portion of the first party'"'"'s personal information to a second party.

8. The method of claim 7, further comprising the step of:

receiving a request from a second party, said request from the second party identifying the first party.

9. The method of claim 7, further comprising the step of:

presenting an authorization to access a portion of the first party'"'"'s personal information.

10. A method of notifying changes to a first party'"'"'s personal information comprising the steps of:

changing the first party'"'"'s information;

designating an entity to receive changed first party'"'"'s information; and

notifying the designated entity of the changed first party'"'"'s information.

11. The method of claim 10, wherein notifying step includes the step of:

transmitting to the designated entity changes to the first party'"'"'s information.

12. The method of claim 10, wherein the notifying step includes the step of:

transmitting to the designated entity an indication of a change to the first party'"'"'s information.

13. The method of claim 10, further comprising the step of:

recording an effective date for a change to the first party'"'"'s personal information.