ATTRIBUTE INFORMATION PROVIDING SYSTEM

• US 20120117657A1
• Filed: 01/04/2012
• Published: 05/10/2012
• Est. Priority Date: 08/28/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Ishigaki, Yoshinobu, Numao, Masayuki, Yuriyama, Madoka, Watanabe, Yuji
• Granted Patent: US 8,713,691 B2
• Time in Patent Office: Days
• US Class Current: 726/26
• CPC Class Codes: G06Q 20/367 involving electronic purses or money safes
• CPC Class Codes: G06Q 30/02 Marketing; Price estimation or determination; Fundraising

Abstract

A system which implements a method for providing attribute data. A request is received from a user device via a network for a virtual ID token relating to attribute information pertaining to a subscriber associated with the user device. A data record including L attributes of the subscriber is read from a database, L being at least 2. The data record is provided to the user device via the network. A selection of M attributes of the L attributes is received from the user device via the network, M being less than L. A virtual record including the M attributes selected from the data record is generated, the virtual record including a virtual ID (VID) for identifying the virtual record. The generated virtual record is stored in the database. The virtual ID token is provided to the user device via the network, wherein the virtual ID token includes the VID.

Claims

1. A system comprising a computer, said computer comprising a processor and a computer readable storage device coupled to the processor, said storage device containing program code configured to be executed by the processor to implement a method for providing attribute data, said method comprising:

receiving a request from a user device via a network for a virtual ID token relating to attribute information pertaining to a subscriber associated with the user device;

responsive to the request for the virtual ID token, reading a data record from a database, said data record comprising L attributes of the subscriber, L being at least 2;

providing the data record to the user device via the network;

receiving, from the user device via the network, a selection of M attributes of the L attributes, M being less than L;

generating a virtual record including the M attributes selected from the data record, said virtual record comprising a virtual ID (VID) for identifying the virtual record;

storing the generated virtual record in the database; and

providing the virtual ID token to the user device via the network, wherein the virtual ID token comprises the VID, wherein an attribute information providing server performs said receiving the request for the virtual ID token, said reading the data record from the database, said providing the data record to the user device, said receiving the selection of M attributes, said generating the virtual record, said storing the generated virtual record in the database, and said providing the virtual ID token to the user device.

2. The system of claim 1, said method further comprising:

receiving a request comprising the VID for attribute information associated with the VID from an attribute information receiving apparatus via the network;

reading the virtual record from the database in response to the request comprising the VID; and

after said reading, providing the virtual record to the attribute information receiving apparatus via the network, wherein the attribute information providing server performs said receiving the request comprising the VID, said reading the virtual record from the database, and said providing the virtual record to the attribute information receiving apparatus.

3. The system of claim 2, wherein said providing the virtual record to the attribute information receiving apparatus is performed in manner that ensures that the virtual ID is concealed from the attribute information receiving apparatus when the virtual record is received by the attribute information receiving apparatus.

4. The system of claim 3, wherein said providing the virtual record to the attribute information receiving apparatus is performed using a 1-out-of-N OT (Oblivious Transfer) protocol.

5. The system of claim 2, said method further comprising after said providing the virtual record to the attribute information receiving apparatus:

providing, by the attribute information providing server, an attribute certificate to the attribute information receiving apparatus in relation to a new transaction between the subscriber and the attribute information receiving apparatus, wherein the attribute certificate pertains to the M attributes in the virtual record provided to the attribute information receiving apparatus.

6. The system of claim 2, wherein the attribute information providing server comprises:

a customer record display unit for displaying the virtual record;

an attribute selection unit for extracting the M attributes from the data record prior to said generating the virtual record;

a virtual record generation unit for performing said generating the virtual record;

a VID token issue unit for performing generating the virtual ID token prior to said providing the virtual token ID to the user device;

a virtual record referencing unit for referencing the virtual record based on the VID prior to said providing the virtual record to the attribute information receiving apparatus; and

a virtual record issue unit for performing said providing the virtual record to the attribute information receiving apparatus.

7. The system of claim 1, wherein the VID token further comprises a URL of the attribute information providing server.

8. The system of claim 1, wherein the attribute information providing server is selected from the group consisting of a financial institution, an Internet Service Provider (ISP), and a shopping site on the network.

9. The system of claim 1, further comprising:

receiving a selection of M1 attributes of the L attributes in the data record, wherein the M1 attributes are not identical to the M attributes; and

storing a second virtual record in the database, wherein the second virtual record comprises the M1 attributes, and wherein the attribute information providing server performs said receiving the selection of M1 attributes and said storing the second virtual record in the database.

10. The system of claim 1, wherein the data record comprises a globally-unique ID (GID) serving as a primary key of the data record, wherein the VID is a primary key of the virtual record, and wherein the VID is independent of the GID.

11. A computer program product, comprising a computer readable storage device having computer readable program code stored therein, said program code configured to be executed by a processor of a computer to implement a method for providing attribute data, said method comprising:

receiving a request from a user device via a network for a virtual ID token relating to attribute information pertaining to a subscriber associated with the user device;

responsive to the request for the virtual ID token, reading a data record from a database, said data record comprising L attributes of the subscriber, L being at least 2;

providing the data record to the user device via the network;

receiving, from the user device via the network, a selection of M attributes of the L attributes, M being less than L;

generating a virtual record including the M attributes selected from the data record, said virtual record comprising a virtual ID (VID) for identifying the virtual record;

storing the generated virtual record in the database; and

providing the virtual ID token to the user device via the network, wherein the virtual ID token comprises the VID, wherein an attribute information providing server performs said receiving the request for the virtual ID token, said reading the data record from the database, said providing the data record to the user device, said receiving the selection of M attributes, said generating the virtual record, said storing the generated virtual record in the database, and said providing the virtual ID token to the user device

12. The computer program product of claim 11, said method further comprising:

receiving a request comprising the VID for attribute information associated with the VID from an attribute information receiving apparatus via the network;

reading the virtual record from the database in response to the request comprising the VID; and

after said reading, providing the virtual record to the attribute information receiving apparatus via the network, wherein the attribute information providing server performs said receiving the request comprising the VID, said reading the virtual record from the database, and said providing the virtual record to the attribute information receiving apparatus.

13. The computer program product of claim 12, wherein said providing the virtual record to the attribute information receiving apparatus is performed in manner that ensures that the virtual ID is concealed from the attribute information receiving apparatus when the virtual record is received by the attribute information receiving apparatus.

14. The computer program product of claim 13, wherein said providing the virtual record to the attribute information receiving apparatus is performed using a 1-out-of-N OT (Oblivious Transfer) protocol.

15. The computer program product of claim 12, said method further comprising after said providing the virtual record to the attribute information receiving apparatus:

providing, by the attribute information providing server, an attribute certificate to the attribute information receiving apparatus in relation to a new transaction between the subscriber and the attribute information receiving apparatus, wherein the attribute certificate pertains to the M attributes in the virtual record provided to the attribute information receiving apparatus.

16. The computer program product of claim 12, wherein the attribute information providing server comprises:

a customer record display unit for displaying the virtual record;

an attribute selection unit for extracting the M attributes from the data record prior to said generating the virtual record;

a virtual record generation unit for performing said generating the virtual record;

a VID token issue unit for performing generating the virtual ID token prior to said providing the virtual token ID to the user device;

a virtual record referencing unit for referencing the virtual record based on the VID prior to said providing the virtual record to the attribute information receiving apparatus; and

a virtual record issue unit for performing said providing the virtual record to the attribute information receiving apparatus.

17. The computer program product of claim 11, wherein the VID token further comprises a URL of the attribute information providing server.

18. The computer program product of claim 11, wherein the attribute information providing server is selected from the group consisting of a financial institution, an Internet Service Provider (ISP), and a shopping site on the network.

19. The computer program product of claim 11, further comprising:

receiving a selection of M1 attributes of the L attributes in the data record, wherein the M1 attributes are not identical to the M attributes; and

storing a second virtual record in the database, wherein the second virtual record comprises the M1 attributes, and wherein the attribute information providing server performs said receiving the selection of M1 attributes and said storing the second virtual record in the database.

20. The computer program product of claim 11, wherein the data record comprises a globally-unique ID (GID) serving as a primary key of the data record, wherein the VID is a primary key of the virtual record, and wherein the VID is independent of the GID.