DATA-PRIVACY MANAGEMENT TECHNIQUE

• US 20140214705A1
• Filed: 01/30/2013
• Published: 07/31/2014
• Est. Priority Date: 01/30/2013
• Status: Active Grant

• Current Assignee: Intuit, Inc.
• Original Assignee: Intuit, Inc.
• Inventors: Balazs, Alex G.
• Granted Patent: US 10,049,411 B2
• Time in Patent Office: Days
• US Class Current: 705/319
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: G06Q 30/018 Certifying business or products
• CPC Class Codes: G06Q 50/00 Information and communication technology [ICT] specially adapted for implementation of business processes of specific business sectors, e.g. utilities or tourism healthcare informatics G16H
• CPC Class Codes: G06Q 50/01 Social networking
• CPC Class Codes: G09G 3/3648 using an active matrix G09G3/367 - G09G3/3696 take precedence
• CPC Class Codes: G09G 3/3659 the addressing of the pixel involving the control of two or more scan electrodes or two or more data electrodes, e.g. pixel voltage dependant on signal of two data electrodes
• CPC Class Codes: G09G 3/3696 Generation of voltages supplied to electrode drivers

Abstract

A technique for controlling release of data associated with an account is described. During this data-privacy management technique, a computer system provides at least a subset of data associated with an account to a third party based on a first consent (which may be received from a user of the account). This subset may have a first classification based on a predefined taxonomy. Subsequently, the third party may notify the computer system that additional data has been derived from the data. In response, the computer system may determine a second classification of the additional data based on a predefined taxonomy. If this second classification is other than a subset of the first classification, the computer system may request a second consent (for example, from the user).

Claims

1. A computer-implemented method for controlling release of data associated with an account, the method comprising:

receiving a first consent for release of at least a subset of the data associated with the account to a third party, wherein the subset has a first classification based on a predefined taxonomy;

providing the subset of the data to the third party based on the first consent;

receiving information from the third party about additional data derived from the data by the third party;

using the computer, determining a second classification of the additional data based on the predefined taxonomy; and

if the second classification is other than a subset of the first classification, providing a second consent.

2. The method of claim 1, wherein the first consent is received from a user of the account.

3. The method of claim 1, wherein the second consent is provided to a user of the account.

4. The method of claim 1, wherein the method further comprises receiving the second consent.

5. The method of claim 4, wherein the method further comprises providing authorization to the third party to release the additional data to other parties based on the second consent.

6. The method of claim 1, wherein the data includes financial data.

7. The method of claim 1, wherein the predefined taxonomy includes a hierarchical set of classes and subclasses.

8. A computer-program product for use in conjunction with a computer system, the computer-program product comprising a non-transitory computer-readable storage medium and a computer-program mechanism embedded therein to control release of data associated with an account, the computer-program mechanism including:

instructions for receiving a first consent for release of at least a subset of the data associated with the account to a third party, wherein the subset has a first classification based on a predefined taxonomy;

instructions for providing the subset of the data to the third party based on the first consent;

instructions for receiving information from the third party about additional data derived from the data by the third party;

instructions for determining a second classification of the additional data based on the predefined taxonomy; and

if the second classification is other than a subset of the first classification, instructions for providing a second consent.

9. The computer-program product of claim 8, wherein the first consent is received from a user of the account.

10. The computer-program product of claim 8, wherein the second consent is provided to a user of the account.

11. The computer-program product of claim 8, wherein the computer-program product further comprises instructions for receiving the second consent.

12. The computer-program product of claim 11, wherein the computer-program product further comprises instructions for providing authorization to the third party to release the additional data to other parties based on the second consent.

13. The computer-program product of claim 8, wherein the data includes financial data.

14. The computer-program product of claim 8, wherein the predefined taxonomy includes a hierarchical set of classes and subclasses.

15. A computer system, comprising:

a processor;

memory; and

a program module, wherein the program module is stored in the memory and configurable to be executed by the processor to control release of data associated with an account, the program module including;

instructions for receiving a first consent for release of at least a subset of the data associated with the account to a third party, wherein the subset has a first classification based on a predefined taxonomy;

instructions for providing the subset of the data to the third party based on the first consent;

instructions for receiving information from the third party about additional data derived from the data by the third party;

instructions for determining a second classification of the additional data based on the predefined taxonomy; and

if the second classification is other than a subset of the first classification, instructions for providing a second consent.

16. The computer system of claim 15, wherein the first consent is received from a user of the account.

17. The computer system of claim 15, wherein the second consent is provided to a user of the account.

18. The computer system of claim 15, wherein the program module further comprises instructions for receiving the second consent.

19. The computer system of claim 18, wherein the program module further comprises instructions for providing authorization to the third party to release the additional data to other parties based on the second consent.

20. The computer system of claim 15, wherein the predefined taxonomy includes a hierarchical set of classes and subclasses.