METHOD AND SYSTEM FOR SECURE SHARING OF PERSONAL INFORMATION

• US 20070261114A1
• Filed: 04/27/2007
• Published: 11/08/2007
• Est. Priority Date: 05/01/2006
• Status: Abandoned Application

• Current Assignee: Michael Pomerantsev
• Original Assignee: Michael Pomerantsev
• Inventors: Pomerantsev, Michael
• Application Number:
  US11/741,058
• Publication Number:
  US 20070261114A1
• Time in Patent Office: Days
• US Class Current: 726/12
• CPC Class Codes: G06F 16/9535 Search customisation based on user profiles and personalisation
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/34 involving the use of external additional devices, e.g. dongles or smart cards
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

A method and a system for secure sharing of personal information are provided. The system may include a communications module to receive a request for personal information of a user, a detector to determine that the request includes a proxy identification key, a matching module to determine that the proxy identification key is associated with the user, a data retrieval module to obtain the requested personal information of the user; and a delivery module to deliver the obtained personal information of the user to an originator of the request. The personal information may be associated with a permanent identification information of the user. The proxy identification key may be viewed as a substitute for the permanent identification information of the user. The proxy identification key may provide additional security by imposing certain restrictions such as the amount of data sharing.

Claims

1. A system comprising:

a communications module to receive a request for personal information of a user, the personal information associated with a permanent identification of the user

a detector to determine that the request includes a proxy identification key, the proxy identification key being a substitute for the permanent identification of the user;

a matching module to determine that the proxy identification key is associated with the user;

a data retrieval module to obtain the requested personal information of the user; and

a delivery module to deliver the obtained personal information of the user to an originator of the request.

2. The system of claim 1, wherein the data retrieval module is to:

determine that the proxy identification key is associated with a specific purpose of inquiry; and

determine that the request is associated with the specific purpose of inquiry.

3. The system of claim 2, wherein the specific purpose of inquiry is a credit application by the user.

4. The system of claim 1, wherein the delivery module is to:

determine that the proxy identification key is associated with a specific type of request; and

determine that the request is of the specific type.

5. The system of claim 1, wherein the delivery module is to:

determine a permitted amount of information associated with the proxy identification key; and

communicate only the permitted amount of the obtained personal information of the user.

6. The system of claim 1, wherein the data retrieval module is to:

determine that the proxy identification key is restricted to one or more vendors; and

determine that the request is associated with the one or more vendors.

7. The system of claim 1, wherein the delivery module is to:

determine that the proxy identification key is associated with one or more permitted dates; and

determine that the request is made on a permitted date from the one or more permitted dates.

8. The system of claim 1, wherein the data retrieval module is to:

determine that the proxy identification key is restricted to a predetermined number of uses; and

determine that the proxy identification key has been used less than the predetermined number prior to the request.

9. The system of claim 1, wherein the proxy identification key is in a format of nine characters.

10. The system of claim 9, wherein the proxy identification key includes one or more dedicated symbols.

11. The system of claim 1, wherein the proxy identification key is in a format customary for user identification in an environment, in which the proxy identification key is being used.

12. The system of claim 1, wherein the detector is to:

detect a supplemental personal authentication key associated with the request; and

determine that the proxy identification key is associated with the supplemental personal authentication key.

13. The system of claim 1, wherein the permanent identification information of the user is the social security number of the user.

14. The system of claim 1, wherein the permanent identification information of the user is the passport number of the user.

15. The system of claim 1, wherein the permanent identification information of the user is the driver'"'"'s license number of the user.

16. The system of claim 1, wherein the permanent identification information of the user is the Identification Card number of the user.

17. The system of claim 1, wherein the permanent identification information includes the name of the user.

18. A method comprising:

receiving a request for personal information of a user, the personal information associated with permanent identification information of the user;

determining that the request includes a proxy identification key, the proxy identification key being a substitute for the permanent identification information of the user;

determining that the proxy identification key is associated with the user;

obtaining the requested personal information of the user; and

communicating the obtained personal information of the user to an originator of the request.

19. The method of claim 18, wherein the obtaining of the requested personal information of the user comprises:

determining that the proxy identification key is associated with a specific purpose of inquiry; and

determining that the request is associated with the specific purpose of inquiry.

20. The method of claim 19, wherein the specific purpose of inquiry is a credit application.

21. The method of claim 18, wherein the communicating of the obtained personal information of the user comprises:

determining a permitted amount of information associated with the proxy identification key; and

communicating only the permitted amount of the obtained personal information of the user.

22. The method of claim 21, wherein the permitted amount of information includes a credit report of the user.

23. The method of claim 18, wherein the obtaining of the requested personal information of the user comprises:

determining that the proxy identification key is restricted to one or more vendors; and

determining that the request is associated with the one or more vendors.

24. The method of claim 23, wherein the determining that the request is associated with the particular vendor is based on a permanent identification information associated with the vendor.

25. The method of claim 23, wherein the determining that the request is associated with the particular vendor is based on a temporary vendor identification, the temporary vendor identification being a substitute for a permanent identification information associated with the vendor.

26. The method of claim 18, wherein the obtaining of the requested personal information of the user comprises:

determining that the proxy identification key is restricted to one or more dates; and

determining that the request is associated with a date from the one or more dates.

27. The method of claim 18, wherein the request includes a supplemental personal authentication key, the method further comprising determining that the proxy identification key is associated with the supplemental personal authentication key.

28. The method of claim 18, wherein the permanent identification information of the user is the social security number of the user.

29. A method comprising:

generating a first proxy identification key for a user, the first proxy identification key being a substitute for the permanent identification information of the user;

storing the first proxy identification key in a profiles database;

receiving a request to determine whether the first proxy identification key is associated with a second proxy identification key;

generating a response based on a determination of whether the second proxy identification key is associated with the profile of the user.

30. The method of claim 29, the first proxy identification wherein key is associated with a list of proxy identification keys generated by a service provider.

31. A machine-readable medium having instruction data to cause a machine to:

receive a request for personal information of a user, the personal information associated with permanent identification information of the user

determine that the request includes a proxy identification key, the proxy identification key being a substitute for the permanent identification information of the user;

determine that the proxy identification key is associated with the user;

obtain the requested personal information of the user; and

deliver the obtained personal information of the user to an originator of the request.

32. A system comprising:

a communications module to receive a request for personal information of a user;

a detector to;

determine that the request includes a proxy identification key and a permanent identification of the user,

determine one or more restrictions associated with the proxy identification key, and

determine that the one or more restrictions do not preclude the request for personal information of the user;

a matching module to determine that the proxy identification key is associated with the permanent identification of the user;

a data retrieval module to access the permanent identification of the user; and

a delivery module to deliver the permanent identification of the user to an originator of the request.

33. The system of claim 32, wherein the permanent identification of the user is the social security number of the user.

34. The system of claim 32, wherein:

the data retrieval module is to determine a permitted amount of information associated with the proxy identification key; and

the delivery module is to notify to the originator of the request regarding the permitted amount of information.

35. The system of claim 32, wherein the one or more restrictions include a purpose of inquiry restriction.

36. The system of claim 32, wherein the one or more restrictions include a type of information restriction.

37. The system of claim 32, wherein the one or more restrictions include a date of inquiry restriction.

38. The system of claim 32, wherein the one or more restrictions include a number of uses restriction.

39. The system of claim 32, wherein the one or more restrictions include a requester restriction.

40. A system comprising:

a communications module to receive a request for a permanent identification of the user;

a detector to determine that the request includes a proxy identification key, the proxy identification key being a substitute for the permanent identification of the user;

a matching module to determine that the proxy identification key is associated with the user;

a data retrieval module to access the permanent identification of the user; and

a delivery module to deliver the permanent identification of the user to a destination.

41. The system of claim 40, wherein the destination is associated with an originator of the request.

42. The system of claim 40, wherein the destination is associated with an agency that has access to the user'"'"'s personal data.

43. The system of claim 40, wherein:

the request for the permanent identification of the user includes a request for personal information of the user;

the data retrieval module is to obtain personal information of the user; and

the delivery module is to deliver the obtained personal information of the user to an originator of the request.

44. The system of claim 40, wherein the data retrieval module is to:

determine that the proxy identification key is associated with a specific purpose of inquiry; and

determine that the request is associated with the specific purpose of inquiry.

45. The system of claim 40, wherein the delivery module is to:

determine that the proxy identification key is associated with a specific type of information; and

determine that the request is associated with the specific type of information.

46. The system of claim 40, wherein the delivery module is to:

determine a permitted amount of information associated with the proxy identification key; and

communicate information regarding the permitted amount of information to an originator of the request.

47. The system of claim 40, wherein the data retrieval module is to:

determine that the proxy identification key is restricted to one or more vendors; and

determine that the request is associated with the one or more vendors.

48. The system of claim 40, wherein the delivery module is to:

determine that the proxy identification key is associated with one or more permitted dates; and

determine that the request is made on a permitted date from the one or more permitted dates.

49. The system of claim 40, wherein the data retrieval module is to:

determine that the proxy identification key is restricted to a predetermined number of uses; and

determine that the proxy identification key has been used less than the predetermined number prior to the request.

50. The system of claim 40, wherein the proxy identification key includes nine characters.

51. The system of claim 50, wherein the proxy identification key includes one or more dedicated symbols.

52. The system of claim 40, wherein the proxy identification key is in a format customary for user identification in an environment, in which the proxy identification key is being used.

53. The system of claim 40, wherein the detector is to:

detect a supplemental personal authentication key associated with the request; and

determine that the proxy identification key is associated with the supplemental personal authentication key.

54. The system of claim 40, wherein the permanent identification information of the user is the social security number of the user.

55. The system of claim 40, wherein the permanent identification information of the user is the passport number of the user.

56. The system of claim 40, wherein the permanent identification information of the user is the driver'"'"'s license number of the user.

57. The system of claim 40, wherein the permanent identification information of the user is the Identification Card number of the user.

58. The system of claim 40, wherein the permanent identification information includes the name of the user.