TRUSTED STATEMENT VERIFICATION FOR DATA PRIVACY

• US 20090063289A1
• Filed: 08/31/2007
• Published: 03/05/2009
• Est. Priority Date: 08/31/2007
• Status: Active Grant

• Current Assignee: Workday Incorporated
• Original Assignee: International Business Machines Corporation
• Inventors: Byrd, Gregory T., Nagaratnam, Nataraj, Nadalin, Anthony J., McIntosh, Michael G.
• Granted Patent: US 10,984,457 B2
• Time in Patent Office: Days
• US Class Current: 705/26
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]

Abstract

Embodiments of the present invention address deficiencies of the art in respect to privacy data management and provide a novel and non-obvious method, system and computer program product for trusted statement verification for data privacy. In one embodiment of the invention, a method for trusted statement verification for data privacy can be provided. The method can include deducing a claim from an attribute for personal data for an end user, receiving a request from a personal data consumer to vouch for an assertion based upon the attribute, comparing the assertion to the claim, and providing a voucher for the assertion to the personal data consumer on behalf of the end user if the claim supports the assertion without revealing the attribute to the personal data consumer.

Claims

1. A method for trusted statement verification for data privacy, the method comprising:

deducing a claim from an attribute for personal data for an end user;

receiving a request from a personal data consumer to vouch for an assertion based upon the attribute;

comparing the assertion to the claim; and

,

providing a voucher for the assertion to the personal data consumer on behalf of the end user if the claim supports the assertion without revealing the attribute to the personal data consumer.

2. The method of claim 1, wherein deducing a claim from an attribute for personal data for an end user, comprises manually mapping a claim to the attribute.

3. The method of claim 1, wherein deducing a claim from an attribute for personal data for an end user, comprises automatically mapping a claim to the attribute according to a rule in a rule base.

4. The method of claim 3, wherein automatically mapping a claim to the attribute according to a rule in a rule base, comprises:

receiving the attribute from the end user over a computer communications network; and

,

applying a rule to generate at least one claim from the attribute.

5. The method of claim 1, further comprising:

retrieving a policy for the end user; and

,

filtering the claim according to the policy.

6. The method of claim 1, further comprising:

retrieving a policy for the end user; and

,

augmenting the claim according to the policy.

7. The method of claim 1, further comprising:

retrieving a policy for the personal data consumer; and

,

filtering the claim according to the policy.

8. The method of claim 1, further comprising:

retrieving a policy for the personal data consumer; and

,

augmenting the claim according to the policy.

9. An e-commerce data processing system configured for trusted statement verification, the system comprising:

a voucher service configured for communications both with an end user and a personal data consumer over a computer communications network; and

,

a mapping of attributes of personal data to claims for the personal data;

the voucher service comprising program code enabled to compare an assertion received from a personal data consumer to a claim in the mapping and to provide a voucher for the assertion to the personal data consumer on behalf of the end user if the claim supports the assertion without revealing the attribute to the personal data consumer.

10. The system of claim 9, further comprising an attribute-to-claims engine, the engine comprising program code enabled to generate the mapping for the attributes by deducing at least one claim for the attributes according to at least one rule in a rule base.

11. The system of claim 9, wherein the assertion is a required bank account balance and the claim is an available bank account balance in excess of a fixed amount.

12. The system of claim 9, wherein the assertion is a required age and the claim is an age range exceeding a fixed amount.

13. A computer program product comprising a computer usable medium embodying computer usable program code for trusted statement verification for data privacy, the computer program product comprising:

computer usable program code for deducing a claim from an attribute for personal data for an end user;

computer usable program code for receiving a request from a personal data consumer to vouch for an assertion based upon the attribute;

computer usable program code for comparing the assertion to the claim; and

,

computer usable program code for providing a voucher for the assertion to the personal data consumer on behalf of the end user if the claim supports the assertion without revealing the attribute to the personal data consumer.

14. The computer program product of claim 13, wherein the computer usable program code for deducing a claim from an attribute for personal data for an end user, comprises computer usable program code for manually mapping a claim to the attribute.

15. The computer program product of claim 13, wherein the computer usable program code for deducing a claim from an attribute for personal data for an end user, comprises computer usable program code for automatically mapping a claim to the attribute according to a rule in a rule base.

16. The computer program product of claim 15, wherein the computer usable program code for automatically mapping a claim to the attribute according to a rule in a rule base, comprises:

computer usable program code for receiving the attribute from the end user over a computer communications network; and

,

computer usable program code for applying a rule to generate at least one claim from the attribute.

17. The computer program product of claim 13, further comprising:

computer usable program code for retrieving a policy for the end user; and

,

computer usable program code for filtering the claim according to the policy.

18. The computer program product of claim 13, further comprising:

computer usable program code for retrieving a policy for the end user; and

,

computer usable program code for augmenting the claim according to the policy.

19. The computer program product of claim 13, further comprising:

computer usable program code for retrieving a policy for the personal data consumer; and

,

computer usable program code for filtering the claim according to the policy.

20. The computer program product of claim 13, further comprising:

computer usable program code for retrieving a policy for the personal data consumer; and

,

computer usable program code for augmenting the claim according to the policy.