System and method for an anonymous exchange of private data

• US 20070130070A1
• Filed: 12/02/2005
• Published: 06/07/2007
• Est. Priority Date: 12/02/2005
• Status: Active Grant

• Current Assignee: Credigy Technologies Inc. (National Bank of Canada)
• Original Assignee: Credigy Technologies Inc. (National Bank of Canada)
• Inventors: Williams, Jason
• Granted Patent: US 8,560,456 B2
• Time in Patent Office: Days
• US Class Current: 705/50
• CPC Class Codes: G06F 21/602 Providing cryptographic facilities or services
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: H04L 2209/42 Anonymization, e.g. involving pseudonyms
• CPC Class Codes: H04L 2209/56 Financial cryptography, e.g. electronic payment or e-cash
• CPC Class Codes: H04L 63/04 for providing a confidential data exchange among entities communicating through data packet networks
• CPC Class Codes: H04L 9/30 Public key, i.e. encryption algorithm being computationally infeasible to invert or user's encryption keys not requiring secrecy

Abstract

Facilitating the purchase and sale of private data between anonymous entities based on the use of encryption and a centralized on-line entity to exchange the private data in a secure environment. The seeker of private data, such as consumer information, transmits an encrypted query to the centralized exchange entity. The query submission includes legal representations stating the legally permissible purpose for seeking the information. The centralized exchange entity compares the encrypted query to an encrypted data index collected from at least one data provider, to determine if the query matches any private data held by a data provider. The comparison is conducted within a secure, search component to ensure the privacy of all data and all parties to the transaction. The exchange entity facilitates the anonymous exchange between the data purchaser and the data provider. A payment invoice can be generated and electronically presented by maintainer. The payment may be electronically debited from the designated account of a data purchaser and remitted to a data provider. In addition, a portion of such funds may be retained by the centralized exchange entity.

Claims

1. A computer-implemented method for exchanging private data, comprising the steps of:

building an index providing an identifier identifying each one of a plurality of data providers operating as a source of the private data and defining each type of the private data maintained in local storage by the data provider;

maintaining each index at the on-line exchange while maintaining the private data at the local storage controlled by each of the data providers;

receiving at the on-line exchange an encrypted query from at least one data buyer, each data buyer operating as a purchaser of the private data, the query providing an identifier for the data buyer and defining a request for at least a selected portion of the private data;

completing a matching operation at the on-line exchange by comparing the query transmitted by one of the data buyers to each index maintained by the exchange; and

in the event of a match resulting from the matching operation, arranging for at least one of the data providers associated with the match and the data buyer associated with the query to exchange the selected portion of the private data via the on-line exchange while maintaining both the anonymity of the at least one data provider and the data buyer and the security of the private data.

2. The computer-implemented method of claim 1 further comprising the step of arranging at the on-line exchange for a payment as compensation for delivery of the selected portion of the private data by the at least one data provider to the data buyer seeking the selected private data portion.

3. The computer-implemented method recited by claim 1, wherein the private data comprises one of identification information, demographic information and financial information, each associated with a personally identifiable individual or entity.

4. The computer-implemented method recited by claim 1 further comprising the step of requiring the data buyer to consent to legal requirements for obtaining the private data, the legal requirements comprising a legal representation presenting a statement of fact as of a certain time made by the data buyer and governing the terms for the private data request of the query, wherein the other party can contractually rely on the statement by the data buyer.

5. The computer-implemented method recited by claim 1, further comprising the step of registering the data providers and the data buyers at the on-line exchange, where the data providers register to operate as sources of the private data and the data buyers register to operate as purchasers of the private data in a manner consistent with legal requirements for obtaining the private data.

6. The computer-implemented method recited by claim 5, wherein the step of registering data providers and data buyers comprises the steps of:

for each of the data providers and the data buyers, completing registration form data for an on-line registration form;

validating the registration form data;

identifying the data providers and the data buyers associated with the completion of a successful validation as registered data providers and registered data buyers.

7. The computer-implemented method recited by claim 6 further comprising the step of requiring each of the data buyers to consent to the legal requirements for obtaining the private data as part of the completion of the registration form data for the on-line registration form.

8. The computer implemented method recited by claim 7, wherein the legal requirements comprise a legal representation comprising a legally binding agreement governing use of the private data by each of the data buyers.

9. The computer-implemented method recited by claim 1, wherein the query comprises an encrypted query and each index comprises an encrypted index, and wherein the step of completing a matching operation at the on-line exchange comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each index, based on the private key; and

comparing the decrypted query to each index record of the decrypted indices;

wherein each of the generating steps and the comparing step are completed within a search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

10. The computer-implemented method recited by claim 1, further comprising the step of transmitting from the on-line exchange to the data buyer a message advising that the selected portion of private data is not available in the event that the matching operation fails to result in a match.

11. The computer-implemented method recited by claim 1, wherein the step of arranging for at least one of the data providers associated with the match and the data buyer associated with the query to exchange the selected portion of the private data comprises:

responsive to the purchase request, transmitting a data request from the on-line exchange to one of the data providers having the selected portion of the private data, the data request representing an offer to purchase the selected portion of the private data and comprising a foreign data key to identify the selected portion of the private data;

receiving at the on-line exchange the selected portion of the private data from the data provider and, in turn, forwarding the selected portion of the private data from the on-line exchange to the data buyer, while maintaining in confidence the identity of the data provider and the identity the data buyer; and

arranging at the on-line exchange for delivery of a payment for the purchase of the selected portion of the private data from the data buyer to the data provider.

12. The computer-implemented method recited by claim 1, wherein the step of arranging for at least one of the data providers associated with the match and the data buyer associated with the query to exchange the selected portion of the private data comprises:

responsive to the purchase request, transmitting a data request from the on-line exchange to one of the data providers having the selected portion of the private data, the data request representing an offer to purchase the selected portion of the private data and comprising a foreign data key to identify the selected portion of the private data;

transmitting the selected portion of the private data from the data provider to the on-line exchange to the data buyer via a distributed computer network while maintaining in confidence the identity of the data provider and the identity the data buyer; and

arranging for delivery of a payment for the purchase of the selected portion of the private data from the data buyer to the data provider.

13. The computer-implemented method recited by claim 1, wherein the step of completing a matching operation at the on-line exchange comprises comparing the query transmitted by one of the data buyers to each index maintained at the on-line exchange.

14. The computer-implemented method recited by claim 13, wherein the query comprises an encrypted query and each index comprises an encrypted index, and wherein the step of responding to the query comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each index, based on the private key; and

comparing the decrypted query to each index record of the decrypted indices,

wherein each of the generating steps and the comparing step are completed within a search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

15. The computer-implemented method recited by claim 1, wherein the query comprises an encrypted query and each index comprises an encrypted index.

16. The computer-implemented method recited by claim 1, wherein the step of building the index comprises the steps of:

compiling at the on-line exchange each index received from the data providers to generate a compiled index; and

for each of the data buyers, creating a separate encrypted version of the compiled index for access by only that data buyer.

17. A computer-implemented method for exchanging private data comprising consumer data, comprising the steps of:

receiving at an on-line exchange a query from one of a plurality of data buyers, the query providing an unique identifier for the data buyer and defining a request for a selected portion of the consumer data, each data buyer consenting to a legal representation governing the terms of use for the consumer data;

responsive to the query, completing a matching operation at the on-line exchange by comparing the query issued by one of the data buyers to each index maintained by the exchange, each index providing an identifier identifying the corresponding data provider and defining each type of the consumer data available from the data provider and maintained in local storage by the data provider;

in the event of a match resulting from the matching operation, managing at the on-line exchange a data exchange operation for at least one of the data providers associated with the match and the data buyer associated with the query in support of a secure exchange of the selected portion of the consumer data while maintaining the anonymity of the at least one data provider and the data buyer.

18. The computer-implemented method of claim 17 further comprising the step of arranging at the on-line exchange for a payment as compensation for delivery of the selected portion of the consumer data by the at least one data provider to the data buyer seeking the selected consumer data portion.

19. The computer-implemented method recited by claim 17, wherein the consumer data comprises one of identification information, demographic information and financial information, each associated with a personally identifiable individual or entity.

20. The computer-implemented method recited by claim 17, wherein the legal representation comprises a statement as of a certain time made by one of the data buyers and governing the terms for the consumer data request of the query, wherein the other party can contractually rely on the statement by the data buyer.

21. The computer-implemented method recited by claim 17, further comprising the step of registering the data providers and the data buyers at the on-line exchange, comprising the steps of:

for each of the data providers and the data buyers, completing registration form data for an on-line registration form;

for each of the data buyers, requiring a consent to legal requirements for obtaining the consumer data as part of the completion of the registration form data;

validating the registration form data;

identifying the data providers and the data buyers associated with the completion of a successful validation as registered data providers and registered data buyers.

22. The computer-implemented method recited by claim 17, wherein the query comprises an encrypted query and the index comprises an encrypted index, and the step of completing a matching operation at the on-line exchange comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each encrypted index, based on the private key submitted by the data buyer; and

comparing the decrypted query to each index record of the decrypted indices,

wherein each of the generating steps and the comparing step are completed within a search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

23. The computer-implemented method recited by claim 17, wherein the step of arranging for at least one of the data providers associated with the match and the data buyer associated with the query to exchange the selected portion of the consumer data comprises:

responsive to the purchase request, transmitting a data request from the on-line exchange to one of the data providers having the selected portion of the consumer data, the data request representing an offer to purchase the selected portion of the consumer data and comprising a foreign data key to identify the selected portion of the consumer data;

receiving at the on-line exchange the selected portion of the consumer data from the data provider and, in turn, forwarding the selected portion of the consumer data from the on-line exchange to the data buyer, while maintaining in confidence the identity of the data provider and the identity the data buyer; and

arranging at the on-line exchange for delivery of a payment for the purchase of the selected portion of the consumer data from the data buyer to the data provider.

24. The computer-implemented method recited by claim 17, wherein the step of arranging for at least one of the data providers associated with the match and the data buyer associated with the query to exchange the selected portion of the consumer data comprises:

responsive to the purchase request, transmitting a data request from the on-line exchange to one of the data providers having the selected portion of the consumer data, the data request representing an offer to purchase the selected portion of the consumer data and comprising a foreign data key to identify the selected portion of the consumer data;

transmitting the selected portion of the consumer data from the data provider to the on-line exchange to the data buyer via a distributed computer network while maintaining in confidence the identity of the data provider and the identity the data buyer; and

arranging for delivery of a payment for the purchase of the selected portion of the consumer data from the data buyer to the data provider.

25. The computer-implemented method recited by claim 17, wherein the query comprises an encrypted query and each index comprises an encrypted index, and wherein the step of responding to the query comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each index, based on the private key; and

comparing the decrypted query to each index record of the decrypted indices,

wherein each of the generating steps and the comparing step are completed within a search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

26. The computer-implemented method recited by claim 17, wherein the query comprises an encrypted query and each index comprises an encrypted index, and wherein the step of building the index comprises the steps of:

compiling at the on-line exchange each encrypted index for the data providers to generate a compiled index; and

creating a separate encrypted version of the compiled index for the benefit of each of the data buyers, whereby each data buyer is associated with a corresponding one of the compiled index.

27. A system operative for exchanging consumer data, comprising:

a plurality of data buyer computers, coupled to a distributed computer network, each operative to transmit a query via a distributed computer network, the query comprising a unique identifier identifying the data buyer computer and defining a request for a selected portion of the consumer data;

a plurality of data provider computers, coupled to the distributed computer network, each operative to maintain a local source of the consumer data;

an on-line exchange, coupled to a distributed computer network, responsive to the query, completing a matching operation at the on-line exchange by comparing the query issued by one of the data buyer computers to each index maintained by the exchange and providing an identifier identifying the data provider computer and defining each type of the consumer data available at the data provider computer; and

wherein the on-line exchange, responsive to a match resulting from the matching operation, is further operative to manage a data exchange operation for at least one of the data provider computers associated with the match and the data buyer computer associated with the query in support of an exchange of the selected portion of the consumer data while maintaining the anonymity of the at least one data provider computer and the data buyer computer.

28. The system of claim 27 wherein the on-line exchange is further operative to arrange for a payment to the at least one data provider computer as compensation for completing delivery of the selected portion of the consumer data to the data buyer computer associated with the query.

29. The system of claim 27, wherein each of the data provider computers and the data buyer computers are operative to register for operations at the on-line exchange.

30. The system of claim 29, wherein each of the data buyer computers are further operative to consent to legal requirements for obtaining and exploiting the consumer data in advance of completion of the data exchange operation managed by the on-line exchange.

31. The computer-implemented method recited by claim 27, wherein the query comprises an encrypted query and the index comprises an encrypted index, and wherein the on-line exchange comprises a search component to insure secure processing of the encrypted query and each encrypted index, the search component operative to generate a decrypted query by decrypting the encrypted query based on a public key submitted by the data buyer computer, generate decrypted indices by decrypting each encrypted index based on a private key, and compare the decrypted query to each index record of the decrypted indices.

32. The system of claim 27, wherein the on-line exchange is operative to manage the on-line exchange of the selected portion of the consumer data by:

in response to receiving a purchase request from the data buyer computer associated with the query, transmitting a data request to one of the data provider computers having the selected portion of the consumer data, the data request representing an offer to purchase the selected portion of the consumer data and comprising a foreign data key to identify the selected portion of the consumer data;

in response to receiving the selected portion of the consumer data from one of the data provider computers, transmitting the selected portion of the consumer data to the data buyer computer while maintaining in confidence the identity of the data provider computer and the identity of the data buyer computer.

33. A computer-implemented method for exchanging private data, comprising the steps of:

registering data providers and data buyers at an on-line exchange, where the data providers register to operate as sources of the private data and the data buyers register to operate as purchasers of the private data in a manner consistent with legal requirements for obtaining the private data;

for each registered data provider, building an encrypted index providing an identifier identifying the registered data provider and defining each type of the private data available from the registered data provider and maintained in local storage by the registered data provider, and maintaining each encrypted index at the on-line exchange;

receiving at the on-line exchange an encrypted query transmitted from one of the registered data buyers, the encrypted query providing an identifier for the registered data buyer and defining a request for a selected portion of the private data;

completing a matching operation at the on-line exchange by comparing the query transmitted by one of the registered data buyers to each index maintained by the exchange on behalf of the registered data providers, the matching operation completed in a search component of the on-line exchange to support secure processing of the query and each index in a processing environment that is separate from all other processing activities of the on-line exchange;

in the event of a match signifying that one of the registered data providers maintains the selected portion of the private data, transmitting a message from the on-line exchange to the registered data buyer associated with the query, the message comprising information about the selected portion of the private data, the cost of purchasing the selected portion of the private data, and an anonymous exchange identifier code for uniquely identifying the selected portion of the private data

receiving at the on-line exchange a request to purchase from the registered data buyer associated with the query, the purchase request confirming a purchase of the selected portion of the private data and comprising the anonymous exchange identifier code;

responsive to the purchase request, transmitting from the on-line exchange a data request to the registered data providers, the data request comprising a foreign data key to identify the selected portion of the private data; and

responsive to a decision by the at least one of the registered data providers to provide the selected portion of the private data in response to the purchase request, coordinating delivery of selected portion of the private data from the registered data provider to the registered data buyer and arranging for delivery of a payment for the purchase of the selected portion of the private data from the registered data buyer to the registered data provider,

whereby the on-line exchange is operative as an escrow agent in the secure exchange of the selected portion of the private data while maintaining the anonymity of the registered data provider and the registered data buyer.

34. The computer-implemented method recited by claim 33, wherein the private data comprises one of identification information, demographic information and financial information, each associated with a personally identifiable individual or entity.

35. The computer-implemented method recited by claim 33, wherein the legal requirements comprise a legal representation as of a certain time made by one of the data buyers and governing the terms for the private data request of the query, wherein the other party can contractually rely on the representation by the data buyer.

36. The computer-implemented method recited by claim 33, wherein the step of registering the data providers and the data buyers at the on-line exchange comprises the steps of:

for each of the data providers and the data buyers, completing registration form data for an on-line registration form;

for each of the data buyers, requiring a consent to the legal requirements for obtaining the private data as part of the completion of the registration form data;

validating the registration form data;

identifying the data providers and the data buyers associated with the completion of a successful validation as registered data providers and registered data buyers.

37. The computer-implemented method recited by claim 33, wherein the step of completing a matching operation at the on-line exchange comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each encrypted index, based on the private key submitted by the data buyer; and

comparing the decrypted query to each index record of the decrypted indices,

wherein each of the generating steps and the comparing step are completed within the search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

38. The computer-implemented method recited by claim 33, wherein the step of building the index comprises the steps of:

compiling at the on-line exchange each index for the data providers to generate a compiled index; and

creating a separate version of the compiled index for the benefit of each of the data buyers.

39. A system operative for exchanging consumer data among a plurality of data buyer computers associated with data buyers seeking to purchase items of the consumer data and a plurality of data provider computers having a local store comprising at least a portion of the consumer data, comprising:

an on-line exchange, responsive to a query comprising a unique identifier identifying one of the data buyer computers and defining a request to purchase one or more items of the consumer data, operative to complete a matching operation at the on-line exchange by comparing the query issued to each index maintained by the exchange, the index providing an identifier identifying the data provider computer and defining each type of the consumer data available at the data provider computer,

the on-line exchange, responsive to a match resulting from the matching operation, further operative to manage a data exchange operation among one of the data provider computers associated with the match and the data buyer computer associated with the query to support an exchange of the one or more items of the consumer data while maintaining the anonymity of the data provider computer and the data buyer computer and preserving the secure nature of the consumer data items.

40. The system of claim 39 wherein the on-line exchange is further operative to arrange for a payment to the data provider computer as compensation for completing delivery of the one or more items of the consumer data to the data buyer computer associated with the query.

41. The system of claim 39, wherein each of the data provider computers and the data buyer computers are operative to register for operations at the on-line exchange in advance of the data exchange operation.

42. The system of claim 41, wherein each of the data buyer computers are further operative to consent to legal requirements for obtaining and exploiting the consumer data in advance of completion of the data exchange operation managed by the on-line exchange.

43. The computer-implemented method recited by claim 39, wherein the query comprises an encrypted query and the index comprises an encrypted index, and wherein the on-line exchange comprises a search component to insure secure processing of the encrypted query and each encrypted index, the search component operative to generate a decrypted query by decrypting the encrypted query based on a public key submitted by the data buyer computer, generate decrypted indices by decrypting each encrypted index based on a private key, and compare the decrypted query to each index record of the decrypted indices.

44. The system of claim 39, wherein the on-line exchange is operative to manage the on-line exchange of the selected portion of the consumer data by:

in response to receiving a purchase request from the data buyer computer associated with the query, transmitting a data request to one of the data provider computers having the one or more items of the consumer data, the data request representing an offer to purchase the selected portion of the consumer data and comprising a foreign data key to identify the selected portion of the consumer data;

in response to receiving the one or more items of the consumer data from one of the data provider computers, transmitting the one or more items of the consumer data to the data buyer computer while maintaining in confidence the identity of the data provider computer and the identity of the data buyer computer.

45. A computer-implemented method for exchanging private data comprising at least a portion of consumer data, comprising the steps of:

registering data providers and data buyers at an on-line exchange, where the data providers register to operate as sources of the private data and the data buyers register to operate as purchasers of the private data in a manner consistent with legal requirements for obtaining the private data;

for each registered data provider, building at the on-line exchange an encrypted index providing an identifier identifying the registered data provider and defining each type of the private data available from the registered data provider and maintained in local storage by the registered data provider, wherein each encrypted index is maintained at the on-line exchange while the private data is maintained in the local storage of each registered data provider;

receiving at the on-line exchange an encrypted query transmitted from one of the registered data buyers, the encrypted query providing an identifier for the registered data buyer and defining a request for a selected portion of the private data;

completing a matching operation at the on-line exchange by comparing the query transmitted by one of the registered data buyers to each index maintained by the on-line exchange on behalf of the registered data providers, the matching operation completed in a search component of the on-line exchange to support secure and independent processing of the query and each index;

in the event of a match signifying that one of the registered data providers maintains the selected portion of the private data desired by one of the registered data buyers, transmitting a message from the on-line exchange to the registered data buyer associated with the query, the message comprising information about the selected portion of the private data and an anonymous exchange identifier code for uniquely identifying the selected portion of the private data;

receiving at the on-line exchange a request to purchase from the registered data buyer associated with the query, the purchase request representing a request for a purchase of the selected portion of the private data and comprising the anonymous exchange identifier code;

responsive to the purchase request, transmitting a data request from the on-line exchange to the registered data provider having the selected portion of the private data, the data request representing an offer to purchase the selected portion of the private data and comprising a foreign data key to identify the selected portion of the private data;

receiving at the on-line exchange the selected portion of the private data from the registered data provider and, in turn, forwarding the selected portion of the private data from the on-line exchange to the registered data buyer, while maintaining in confidence the identity of the registered data provider and the identity the registered data buyer; and

arranging at the on-line exchange for delivery of a payment for the purchase of the selected portion of the private data from the registered data buyer to the registered data provider.

46. The computer-implemented method recited by claim 45, wherein the private data comprises one of identification information, demographic information and financial information, each associated with a personally identifiable individual or entity.

47. The computer-implemented method recited by claim 45, wherein the legal requirements comprise a legal representation as of a certain time made by one of the data buyers and governing the terms for the private data request of the query, wherein the other party can contractually rely on the representation by the data buyer.

48. The computer-implemented method recited by claim 45, wherein the step of registering the data providers and the data buyers at the on-line exchange comprises the steps of:

for each of the data providers and the data buyers, completing registration form data for an on-line registration form;

for each of the data buyers, requiring a consent to the legal requirements for obtaining the private data as part of the completion of the registration form data;

validating the registration form data;

identifying the data providers and the data buyers associated with the completion of a successful validation as registered data providers and registered data buyers.

49. The computer-implemented method recited by claim 45, wherein the step of completing a matching operation at the on-line exchange comprises:

generating a decrypted query by decrypting the encrypted query, based on a public key submitted by the data buyer;

generating decrypted indices by decrypting each encrypted index, based on the private key submitted by the data buyer; and

comparing the decrypted query to each index record of the decrypted indices,

wherein each of the generating steps and the comparing step are completed within the search component of the on-line exchange to insure secure processing of the encrypted query and each encrypted index.

50. The computer-implemented method recited by claim 45, wherein the step of building the index comprises the steps of:

compiling at the on-line exchange each index for the data providers to generate a compiled index; and

creating a separate version of the compiled index for the benefit of each of the data buyers.