METHOD AND APPARATUS FOR AUTHORIZING THE TRANSFER OF INFORMATION

• US 20070277229A1
• Filed: 01/19/2007
• Published: 11/29/2007
• Est. Priority Date: 09/20/2000
• Status: Active Grant

• Current Assignee: United Parcel Service Of America Incorporated (United Parcel Service Incorporated)
• Original Assignee: United Parcel Service Of America Incorporated (United Parcel Service Incorporated)
• Inventors: Vogel, Robert, Klingenberg, Robert, Schenken, Chris, Barnes, Dave, Frank, Daniel
• Granted Patent: US 8,225,388 B2
• Time in Patent Office: Days
• US Class Current: 726/4
• CPC Class Codes: G06F 21/33 using certificates
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06F 21/6272 by registering files or documents with a third party
• CPC Class Codes: G06Q 10/08 Logistics, e.g. warehousing, loading or distribution; Inventory or stock management
• CPC Class Codes: G06Q 10/083 Shipping

Abstract

The present invention overcomes deficiencies in the prior art by providing a PIN-based system for managing delivery of privileged information, which utilizes “third-party” authorization. In one embodiment this system includes the use of three separate parties, a First Party, a Second Party, and a Third Party. The First Party initially “registers” with the Second Party by providing self-authenticating core registration information. This registration provides the First Party with a first set of privileges. The First Party may then ask for a PIN number in order to obtain a second set of privileges to observe information provided by the Second Party which is related to a Third Party. In requesting the PIN, the First Party must provide additional registration information (beyond the core information) to the Second Party relating to the Third Party, which the Second Party can authenticate due to an existing relationship which can be checked. The Second Party then forwards the PIN request to the Third Party along with the First Party'"'"'s basic registration information. A PIN administrator at the Third Party'"'"'s location can be designated by the First or the Third party. The Third Party then can decide whether to forward the PIN to the First Party. If the PIN is so forwarded, the First Party then may use the PIN to gain the requested additional access privileges. The second set of privileges can be dynamically modified by the Third Party. Although at least three parties can be involved, two of these parties could be the same.

Claims

1. A method of authorizing the transfer of various types of information within a group of parties, said parties including a First Party, a Second Party, and a Third Party, said First Party holding First Party Information, and said Third Party having in interest in Third Party Information held by said Second Party, said method including the following steps:

facilitating a Request from said First Party to said Second Party, said Request being to allow said First Party to access said Third Party Information held by said Second Party;

facilitating the forwarding of said First Party'"'"'s Request from said Second Party to said Third Party, said Request accompanied by an Authorization Code authorized by said Second Party;

facilitating authorization of said First Party'"'"'s Request by said Third Party by the transfer of said Authorization Code from said Third Party to said First Party; and

facilitation of the presentation of said Authorization Code from said First Party to said Second Party, such that said First Party is authorized to obtain said Third Party Information from said Second Party.

2. The method as claimed in claim 1, further comprising the step of allowing said First Party to designate a related internal party to receive said Authorization Code from said Third Party.

3. The method as claimed in claim 1, wherein said access to at least a portion of said Third Party Information can be later withdrawn.

4. The method as claimed in claim 1, further comprising the step of facilitating reporting by said Second Party to said Third Party as to who has access the said Third Party Information and their access status.

5. The method as claimed in claim 1, wherein said Third Party Information relates to parcel delivery.

6. The method as claimed in claim 1, wherein said Third Party Information relates to parcel delivery, and includes “

delivery name and address” and

“

reference number”

.

7. The method as claimed in claim 1, wherein said Third Party Information relates to medical records.

8. The method as claimed in claim 1, wherein said Third Party Information relates to credit information.

9. The method as claimed in claim 1, wherein said Third Party is a person and wherein said Third Party Information relates to information personal to said Third Party.

10. The method as claimed in claim 1, wherein said First Party and said Third Party are different sub-entities within an overall commonly-controlled entity.

11. The method as claimed in claim 1, wherein said First Party and said Third Party are different entities within an overall commonly-controlled company.

12. A method of authorizing the transfer of various types of information within a group of parties, said parties including a First Party, a Second Party, and a Third Party, said First Party holding First Party Information, and said Third Party having in interest in Third Party Information held by said Second Party, said method including the following steps:

facilitating a Request from said First Party to said Second Party, said Request being to allow said First Party to access said Third Party Information held by said Second Party;

facilitating the forwarding of said First Party'"'"'s Request from said Second Party to said Third Party, said Request accompanied by an Authorization Code authorized by said Second Party;

facilitating authorization of said First Party'"'"'s Request by said Third Party by the transfer of said Authorization Code from said Third Party to said First Party, said transfer done via hand delivery to a physical address associated with said Third Party; and

facilitation of the presentation of said Authorization Code from said First Party to said Second Party, such that said First Party is authorized to obtain said Third Party Information from said Second Party.

13. The method as claimed in claim 12, further comprising the step of allowing said First Party to designate a related internal party to receive said Authorization Code from said Third Party.

14. The method as claimed in claim 12, wherein said Third Party Information relates to parcel delivery.

15. The method as claimed in claim 12, wherein said Third Party Information relates to parcel delivery, and includes “

delivery name and address” and

“

reference number”

.

16. The method as claimed in claim 12, wherein said Third Party Information relates to medical records.

17. The method as claimed in claim 12, wherein said Third Party Information relates to credit information.

18. The method as claimed in claim 12, wherein said Third Party is a person and wherein said Third Party Information relates to information personal to said Third Party.

19. The method as claimed in claim 12, wherein said First Party and said Third Party are different sub-entities within an overall commonly-controlled entity.

20. The method as claimed in claim 12, wherein said First Party and said Third Party are different entities within an overall commonly-controlled company.

21-32. -32. (canceled)