DEVICE FOR MANAGEMENT OF PERSONAL DATA

• US 20100145807A1
• Filed: 12/05/2008
• Published: 06/10/2010
• Est. Priority Date: 12/05/2008
• Status: Abandoned Application

• Current Assignee: NCR Corporation (NCR Voyix Corporation)
• Original Assignee: NCR Corporation (NCR Voyix Corporation)
• Inventors: Kobres, Erick C.
• Application Number:
  US12/329,191
• Publication Number:
  US 20100145807A1
• Time in Patent Office: Days
• US Class Current: 705/14.660
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 30/0269 based on user profile or attribute
• CPC Class Codes: G06Q 30/0601 Electronic shopping [e-shopping]
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16H 10/65 stored on portable record carriers, e.g. on smartcards, RFID tags or CD

Abstract

A portable device which stores and transmits personal information relating to a person, to simplify transfer of such information in transactions. The device contains a first database, such as a medical history of a person, which is encrypted. Specific parties, such as medical personnel, are authorized to gain access to the first database, but not other parties. The device de-crypts the first database and transmits the data to the authorized parties. Similar procedures are undertaken with respect to other databases contained within the device.

Claims

1. A portable device, comprising:

a) a first collection of data which

i) is encrypted, and

ii) requires a first key for de-cryption;

b) a second collection of data which is not encrypted;

c) a set of access definitions, which identify parties who are authorized to gain access the first collection of data;

d) a control system which

i) identifies a party A seeking data from the first collection of data, and

ii) determines whether the access definitions authorize the party A to gain access to the first collection of data and, if so, decrypts data within the first collection and transmits resulting plain text to party A.

2. A device as in claim 1, in which the control system transmits data from the second collection to a party B seeking access, without identifying party B.

3. A device as in claim 1, and further comprising:

e) a third collection of data which

i) is encrypted, and

ii) requires a third key for de-cryption; and

f) in which the control system grants access to the third collection to a party C, but not to party B.

4. A device as in claim 1, in which the first collection of data comprises a medical history of a person owning the device.

5. A device as in claim 2, in which the second collection of data comprises information which is obtainable by lawful observation of a person owning the device while in a public place.

6. A method of operating a portable device, comprising:

a) maintaining within the device first data which indicates medical history of a person, said data being encrypted and requiring a first key for de-cryption;

b) presenting the device to a medical services provider;

c) receiving identifying data from the provider, and, if the identifying data meets predetermined criteria, using said key to de-crypt data, and transmitting resulting plain text to the provider;

d) maintaining within the device second data which indicates a payor for services;

e) presenting the device to a billing agent of the provider; and

f) receiving identifying data from the billing agent, and, if the identifying data meets predetermined criteria, instructing the payer to submit a payment to the billing agent.

7. A system, comprising:

a) a portable device A, which contains

i) a database A which

A) comprises a medical history of a person A,

B) is encrypted using a key A, and

C) conforms to a schema A; and

ii) a database B which is not encrypted;

b) a portable device C, which contains

i) a database C which

A) comprises a medical history of a person C,

B) is encrypted using a key C, and

C) conforms to said schema A; and

ii) a database D which is not encrypted;

c) a registry, accessible to devices A and C, which defines

i) parties A who are granted access to database A, and

ii) parties C who are granted access to database C;

d) a control system in device A which restricts access to database A to parties A; and

e) a control system in device C which restricts access to database A to parties C; and

f) a publicly available definition of schema A.

8. A portable device, comprising:

a) an access control system which

i) grants access to a database A to a party A;

ii) grants access to a database B to a party B;

iii) denies access to database A to party B; and

iv) denies access to database B to party A; and

b) an input control system which examines data submitted by party A and, if the submitted data meets predetermined criteria, stores the submitted data.

9. Device according to claim 8, in which database A is located remotely from the portable device.

10. Device according to claim 8, in which party A is a merchant and database A contains financial account data which allows an owner of the portable device to make a purchase from party A.

11. Device according to claim 10, in which the submitted data comprises a reward given in response to said purchase.