System and Method for Storage and Retrieval of Information Subject to Authorization by a Data Controller

• US 20100057587A1
• Filed: 11/10/2009
• Published: 03/04/2010
• Est. Priority Date: 10/07/1998
• Status: Active Grant

• Current Assignee: PayPal, Inc. (PayPal Holdings, Inc.)
• Original Assignee: PayPal, Inc. (PayPal Holdings, Inc.), Paypal International Limited (PayPal Holdings, Inc.)
• Inventors: ERSHEID, Ali, LIGHT, Elliott D.
• Granted Patent: US 8,296,187 B2
• Time in Patent Office: Days
• US Class Current: 705/26
• CPC Class Codes: G06Q 20/04 Payment circuits
• CPC Class Codes: G06Q 20/10 specially adapted for electronic funds transfer [EFT] systems; specially adapted for home banking systems
• CPC Class Codes: G06Q 20/389 Keeping log of transactions for guaranteeing non-repudiation of a transaction
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G06Q 30/0609 Buyer or seller confidence or verification
• CPC Class Codes: G06Q 40/04 Trading; Exchange, e.g. stocks, commodities, derivatives or currency exchange

Abstract

A system and method for storage and retrieval of information subject to authorization by a data controller that allows information for purchasing and other information exchange to occur only for authorized parties. A data subject place information abbot the data subject into a data repository controlled by a data controller. The data controller authorizes a data recipient to obtain that data subject data when authorized by a data subject. Such transactions as purchases of goods and services and applying for college admission are the types of transactions contemplated. The data repository places client software on the computer of the data recipient thereby signifying that the data recipient is authorized. Thereafter, the data recipient can receive information about the data subject when the data subject accepts and offer from the data recipient.

Claims

1. A system for purchasing an item over a computer network, comprising:

a data subject computer, coupled to the network;

a data recipient computer, coupled to the network; and

a server, including a processor, said server coupled to the network and independent of the data recipient computer, including a database and data repository software executed by the processor to;

receive, from a data subject, an offer associated with the item and with a data recipient computer and a message including a data subject identifier, the offer originating from the data subject accessing a Web page of the data recipient, and

if the data subject computer is registered and the data recipient computer is authorized;

retrieve purchasing information associated with the data subject from the database,

send a buy decision to the data subject, the buy decision presenting a choice between purchasing the item, changing the purchasing information, or declining to purchase the item, and

in response to the buy decision received from the data subject computer comprising an election to purchase the item, send the purchasing information to the data recipient computer.

2. The system of claim 1, wherein the offer includes a data recipient identifier, an item price, a data recipient digital signature to ensure validity of the offer, a final price indicator and a transaction number.

3. The system of claim 2, wherein the purchasing information associated with the data subject includes credit card information and shipping information, the shipping information including a shipping address and a shipping method.

4. The system of claim 3, wherein the data repository software is further adapted to:

determine whether the credit card information is accepted by the data recipient computer.

5. The system of claim 4, wherein the data repository software is further adapted to:

obtain a new price from the data recipient computer based on the shipping address and the shipping method; and

set the item price equal to the new price.

6. The system of claim 1, wherein the data repository software is further adapted to:

prompt the data subject computer for a passphrase; and

authenticate the data subject computer based on a passphrase stored within the database.

7. The system of claim 1, wherein the data repository software is further adapted to:

store the transaction information in an authorized data recipient transaction log.

8. The system of claim 1, wherein the data repository software is further adapted to:

store the transaction information in a data subject transaction log.

9. The system of claim 1, wherein the data repository software is further adapted to:

send a transaction confirmation message to the data subject computer.