SYSTEM FOR PROTECTING PERSONAL DATA

• US 20120110677A1
• Filed: 06/30/2009
• Published: 05/03/2012
• Est. Priority Date: 06/30/2009
• Status: Active Grant

• Current Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Original Assignee: Nokia Solutions and Networks US LLC (Nokia Corporation)
• Inventors: Bauer-Hermann, Markus, Seidl, Robert, Abendroth, Joerg
• Granted Patent: US 8,683,604 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: H04L 63/0407 wherein the identity of one or more communicating identities is hidden cryptographic mechanisms or cryptographic arrangements for anonymous credentials or for identity based cryptographic systems H04L9/00

Abstract

A method of providing data in response to a search request comprises the steps of a social networking website receiving the search request to provide a pseudonym associated with the real name; the social networking website determining that the search request is for a pseudonym which, within its database, is not associated with the real name; the social networking website referring the search request to a identity management server which contains an association between the pseudonym and the real name; the identity management server determining the pseudonym which is associated with the real name; and the identity management server providing an information item which is related to the pseudonym.

Claims

1. A method of providing data in response to a request comprising the steps of:

a first entity receiving a request to provide data associated with an attribute;

the first entity determining that the request is for data which within the first entity is not associated with the attribute;

the first entity referring the request to a second entity which contains an association between the data and the attribute;

the second entity determining the data which is associated with the attribute; and

the second entity providing an information item which is related to the data.

2. A method according to claim 1 in which the first entity is a service provider.

3. A method according to claim 1 in which the first entity is a social networking website.

4. A method according to claim 1 in which the request is a search request in respect of a real name to identify a pseudonym of a user registered with the first entity having that real name.

5. A method according to claim 1 in which the data is a pseudonym.

6. A method according to claim 1 in which the attribute is a real name.

7. A method according to claim 1 in which the second entity is an identity management element.

8. A method according to claim 1 in which the data related item is the data.

9. A method according to claim 1 in which the data related item is not the data, but can be used to obtain the data directly from the second entity.

10. A method according to claim 1 in which a near-complete user record is stored in the first entity and certain key information is stored in the second entity.

11. A method according to claim 1 in which the second entity is under the control of a network operator.

12. A method according to claim 1 in which an individual identified as a result of submission of the request provides a permission response to the second entity.

13. A method according to claim 1 in which the second entity is capable of serving a number of first entities.

14. A method according to claim 1 in which the second entity uses contact information in respect of the first entity to carry out a search to reveal pseudonyms which contacts use in another first entity.

15. A method according to claim 1 in which the request only goes to the second entity if the first entity determines that the attribute is one which is controlled by the second entity.

16. A system for providing data in response to a request comprising:

a first entity capable of receiving a request to provide data associated with an attribute and capable of determining that the request is for data which is not associated with the attribute within the first entity; and

a second entity containing an association between the data and the attribute which is capable of receiving the request from the first entity, the second entity being capable of determining the data which is associated with the attribute and being capable of providing an information item which is related to the data.

17. A server for providing a response to a request comprising:

an input block capable of receiving a request to provide data associated with an attribute from a first entity which has determined that the request is for data which is not associated with the attribute within the first entity;

a store containing the data and the attribute and an association between them;

a determining block capable of determining the data which is associated with the attribute; and

an output block capable of providing an information item which is related to the data.

18. A computer program product comprising software code that when executed on a computing system performs a method of providing data in response to a request comprising the steps of:

a first entity receiving a request to provide data associated with an attribute;

the first entity determining that the request is for data which within the first entity is not associated with the attribute;

the first entity referring the request to a second entity which contains an association between the data and the attribute;

the second entity determining the data which is associated with the attribute; and

the second entity providing an information item which is related to the data.

19. A computer program product according to claim 18 which has executable code portions which are capable of carrying out the steps of the method.

20. A computer program product according to claim 18 which is stored on a computer-readable medium.