USER-CONTROLLED CENTRALIZED PRIVACY MARKETPLACE SYSTEM

• US 20140282852A1
• Filed: 03/12/2014
• Published: 09/18/2014
• Est. Priority Date: 03/12/2013
• Status: Active Grant

• Current Assignee: Jacqueline K. Vestevich
• Original Assignee: Jacqueline K. Vestevich
• Inventors: Vestevich, Jacqueline K.
• Granted Patent: US 9,405,930 B2
• Time in Patent Office: Days
• US Class Current: 726/1
• CPC Class Codes: G06F 21/52 during program execution, e.g. stack integrity ; Preventing unwanted data erasure; Buffer overflow
• CPC Class Codes: G06F 21/554 involving event detection and direct action
• CPC Class Codes: G06F 21/62 Protecting access to data via a platform, e.g. using keys or access control rules
• CPC Class Codes: G06F 21/6263 during internet communication, e.g. revealing personal data from cookies
• CPC Class Codes: G06F 9/465 Distributed object oriented systems remote method invocation [RMI] G06F9/548

Abstract

A system for managing personal information of a user includes: a personal information database including personal information records of the user including data associated with the user, wherein a user is associated with a data policy including at least one permission for an accessing party to interact with a personal information record; and a data access module that receives and responds to requests from an accessing party, wherein a request may be one of: a read request specifying a personal information record to be read; and a write request specifying a personal information to be written to a personal information record to be written, wherein in response to a write request, the data access module responds with the a personal information record to be read, or updates the personal information record to be written in the personal information database, if permitted by the personal information record the privacy policy.

Claims

1. A system for managing personal information of a user comprising:

a personal information database including personal information records of the user, wherein personal information records include any data associated with the user, wherein a user is associated with a data policy, and wherein a data policy includes at least one permission for an accessing party to interact with a personal information record, wherein the permission may be one of a read permission, and write permission; and

a data access module that receives and responds to requests from an accessing party, wherein a request may be one of;

a read request specifying a personal information record to be read, wherein in response to a read request, the data access module responds with the a personal information record to be read if permitted by the read permission of the personal information record of the privacy policy; and

a write request specifying a personal information to be written to a personal information record to be written, wherein in response to a write request, the data access module updates the personal information record to be written in the personal information database with the personal information to be written if permitted by the write permission of the personal information record the privacy policy.

2. The system of claim 1, wherein the permission may further be a share permission, and wherein a request may further be:

a share request to share a personal information record with a third party, the share request specifying a personal information record to be shared, wherein in response to a share request, the data access module responds with a message indicating that the personal information record to be shared may be shared if permitted by the share permission of the personal information record the privacy policy.

3. The system of claim 1, further comprising:

an access token generator that, in response to a user request, generates an access token and provides the access token to the user, wherein when the data access module receives an access token from an accessing party, the data access module updates at least one permission of the data policy for the accessing party.

4. The system of claim 3, wherein the access token is provided as a QR code.

5. The system of claim 3, wherein when the data access module receives an access token from an accessing party, the data access module further provides the accessing party the data policy associated with the access token.

6. The system of claim 1, further comprising:

a data viewer that enables a user to view and edit personal information records associated with the user; and

a data policy editor including a user interface for viewing and subscribing to one or more available data policies, wherein subscribing to a chosen policy of the one or more available data policies associates personal information records of the user with the chosen policy.

7. The system of claim 6, wherein the data policy editor includes a social network.

8. The system of claim 1, wherein a request may further be:

a registration request including business servers information, wherein in response to the registration request, the data access module, in response to an update to the personal information of a personal information record including a read permission of the privacy policy permitting read access to an accessing party, pushes the update to the personal information to a business server specified by the business servers information.