CONTROLLED SHARING OF PERSONAL DATA

• US 20090327420A1
• Filed: 07/10/2007
• Published: 12/31/2009
• Est. Priority Date: 07/10/2006
• Status: Active Grant

• Current Assignee: Thales DIS France SAS (Thales SA)
• Original Assignee: Gemalto SA (Thales SA)
• Inventors: Mallet, Lionel, Faure, Frédéric
• Granted Patent: US 8,793,340 B2
• Time in Patent Office: Days
• US Class Current: 709/204
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/12 Applying verification of the received information cryptographic mechanisms or cryptographic arrangements for data integrity or data verification H04L9/32

Abstract

A first user of a first communicating object shares personal data in response to a request from a second user. The shared data are associated with a reference of the second user in the first communicating object and are transmitted to the second communicating object in order to be recorded therein in association with a reference of the first user. The first user controls the shared personal data from the first communicating object by transmitting a control instruction to the second communicating object. The instruction contains at least the reference of the first user in order to find the personal data of the first user in association with the reference in the second communicating object, and to treat the personal data according to the transmitted control instruction.

Claims

1. A method for controlling the sharing of personal data of a first user of a first communicating object with a second user of a second communicating object, comprising the following steps:

sharing, in the first communicating object, in response to a request from a second user, personal data of the first user recorded in the first communicating object among other personal data of the first user,

associating, in the first communicating object, the personal data shared with a reference of the second user, and

transmitting the shared personal data to the second communicating object and recording said shared personal data in the second communicating object in association with a reference of the first user.

2. A method according to claim 1, including after the step of sharing, a step of controlling, from the first communicating object, the shared personal data of the first user by transmitting a control instruction containing at least the reference of the first user to the second communicating object in order to find, in the second communicating object, the personal data of the first user in association with the reference extracted from the control instruction and to treat said personal data according to the transmitted control instruction.

3. A method according to claim 2, wherein the step of controlling includes:

in the first communicating object, updating at least one personal datum of the first user into a modified personal datum, searching for the reference of the second user associated with the personal datum, and transmitting the control instruction containing the modified personal datum and the reference of the first user to the second communicating object, and

updating the personal datum associated with the reference of the first user extracted from the control instruction in the second communicating object according to the modified personal datum extracted from the control instruction.

4. A method according to claim 2, wherein the step of controlling includes a transmission of the control instruction containing the reference of the first user from the first communicating object to the second communicating object, the deletion of at least one personal datum associated with the reference of the first user extracted from the control instruction in the second communicating object and the deletion of the association between said personal datum and the reference of the second user in the first communicating object.

5. A method according to claim 1, wherein the step of controlling further includes the transmission of the reference of the second user from the first communicating object to server means and the transmission of an access address corresponding to the transmitted reference of the second user from the server means to the first communicating object, so that the first communicating object transmits, according to the access address, the control instruction to the second communicating object.

6. A method according to claim 1, initially including recording personal data of the first user in the first communicating object, transmitting an access address of the first communicating object from said first said communicating object to server means, generating the reference of the first user by the server means, and matching the reference with the access address transmitted in the server means.

7. A method according to claim 1, wherein utilization rules created by the first user are transmitted together with the shared personal data from the first communicating object to the second communicating object.

12. A method according to claim 3, wherein the step of controlling includes a transmission of the control instruction containing the reference of the first user from the first communicating object to the second communicating object, the deletion of at least one personal datum associated with the reference of the first user extracted from the control instruction in the second communicating object and the deletion of the association between said personal datum and the reference of the second user in the first communicating object.

13. A method according to claim 2, wherein the step of controlling further includes the transmission of the reference of the second user from the first communicating object to server means and the transmission of an access address corresponding to the transmitted reference of the second user from the server means to the first communicating object, so that the first communicating object transmits, according to the access address, the control instruction to the second communicating object.

14. A method according to claim 3, wherein the step of controlling further includes the transmission of the reference of the second user from the first communicating object to server means and the transmission of an access address corresponding to the transmitted reference of the second user from the server means to the first communicating object, so that the first communicating object transmits, according to the access address, the control instruction to the second communicating object.

15. A method according to claim 4, wherein the step of controlling further includes the transmission of the reference of the second user from the first communicating object to server means and the transmission of an access address corresponding to the transmitted reference of the second user from the server means to the first communicating object, so that the first communicating object transmits, according to the access address, the control instruction to the second communicating object.

16. A method according to claim 2, initially including recording personal data of the first user in the first communicating object, transmitting an access address of the first communicating object from said first said communicating object to server means, generating the reference of the first user by the server means, and matching the reference with the access address transmitted in the server means.

17. A method according to claim 3, initially including recording personal data of the first user in the first communicating object, transmitting an access address of the first communicating object from said first said communicating object to server means, generating the reference of the first user by the server means, and matching the reference with the access address transmitted in the server means.

18. A method according to claim 4, initially including recording personal data of the first user in the first communicating object, transmitting an access address of the first communicating object from said first said communicating object to server means, generating the reference of the first user by the server means, and matching the reference with the access address transmitted in the server means.

19. A method according to claim 5, initially including recording personal data of the first user in the first communicating object, transmitting an access address of the first communicating object from said first said communicating object to server means, generating the reference of the first user by the server means, and matching the reference with the access address transmitted in the server means.

20. A method according to claim 2, wherein utilization rules created by the first user are transmitted together with the shared personal data from the first communicating object to the second communicating object.

8. A communicating object of a first user communicating with a second communicating object of a second user for controlling the sharing of personal data of the first user with a second user, comprising:

means for sharing in response to a request from the second user of a personal datum of a first user recorded in the first communicating object among other personal data of the first user,

means for associating the shared personal data with the reference of the second user,

means for transmitting the shared personal data to the second communicating object in order to record the transmitted personal data in the second communicating object in association with a reference of the first user, and

means for controlling the shared personal data of the first user by transmitting a control instruction containing at least the reference of the first user to the second communicating object in order to find, in the second communicating object, the personal data of the first user in association with a reference extracted from the control instruction and to treat said personal data according to the transmitted control instruction.

9. A communicating object communicating with a first communicating object of a first user controlling the sharing of personal data with a second user using said communicating object, comprising:

means for requesting personal data from the first user recorded in the first communicating object among other personal data of the first user, the shared personal data recorded in the first communicating object being associated with a reference of the second user,

means for recording the transmitted shared personal data in association with a reference of the first user, and

means for treating the shared personal data associated with the reference of the first user extracted from a control instruction transmitted from the first communicating object according to the control instruction.

10. A computer readable medium having stored therein a program able to be implemented in a first communicating object communicating with a second communicating object of a second user for controlling the sharing of personal data of the first user with the second user, said program including instructions which, when the program is run in the first communicating object, carry out the following steps:

sharing, in response to a request from the second user, the personal data of the first user recorded in the first communicating object among other personal data of the first user,

associating the personal data shared with a reference of the second user,

transmitting the shared personal data to the second communicating object, in order to record the transmitted personal data in the second communicating object in association with the reference of the first user, and

controlling the shared personal data of the first user by transmitting a control instruction containing at least the reference of a first user to the second communicating object, in order to find in the second communicating object the personal data of the first user in association with the reference extracted from the control instruction and to treat said personal data according to the transmitted control instruction.

11. A computer readable medium having stored therein a program able to be implemented in a communicating object communicating with a first communicating object of a first user controlling the sharing of personal data with a second user using said communicating object, said program including instructions which, when the program is run in said communicating object, carry out the following steps:

requesting personal data of the first user recorded in the first communicating object among other personal data of the first user, the shared personal data recorded in the first communicating object being associated with a reference of the second user,

recording the transmitted shared personal data in association with the reference of the first user, and

treating the shared personal data associated with the reference of the first user extracted from a control instruction transmitted from the first communicating object, according to the transmitted control instruction.