SYSTEM AND METHOD FOR PROVIDING CONSENT MANAGEMENT

• US 20160112208A1
• Filed: 10/16/2014
• Published: 04/21/2016
• Est. Priority Date: 10/16/2014
• Status: Active Grant

• Current Assignee: Verato, Inc.
• Original Assignee: Araxid Prime, Inc.
• Inventors: Williams, J. Brent, Figley, Tara
• Granted Patent: US 9,621,357 B2
• Time in Patent Office: Days
• US Class Current: 1/1
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 63/101 Access control lists [ACL]
• CPC Class Codes: H04L 9/006 involving public key infrastructure [PKI] trust models network architecture or network communication protocol for supporting authentication of entities using certificates in a packet data network H04L63/0823
• CPC Class Codes: H04L 9/3247 involving digital signatures
• CPC Class Codes: H04L 9/3268 using certificate validation, registration, distribution or revocation, e.g. certificate revocation list [CRL]

Abstract

A system and method for managing consent for an enterprise to, for example, provide access to controlled data to another enterprise wherein the controlled data can be in the form of subject data records. The system includes a consent management module operative to associate a plurality of control levels with a subject data record and process a consent request requesting access to the controlled data. Access is determined based on the control levels associated with a subject of the controlled data, a requesting operator, and/or the controlled data itself, A control level data set comprising the control levels for use in controlling access to the controlled data and/or subject data records is stored in a database.

Claims

1. A method for use in a computer-based consent management system for allowing controlled data to be interactively shared among operators of said computer-based consent management system, the method comprising:

storing, by an electronic circuit included in said consent management system operated by a sharing operator, a control data record in a first database that is included in said consent management system, wherein said control data record contains a plurality of control levels, wherein each of said plurality of control levels defines a distinct set of controls that are applied to controlled data and said plurality of control levels are applied based on reference data associated with a subject;

associating, by said electronic circuit, at least one of said plurality of control levels with at least a portion of a subject data record, wherein said subject data record is associated with the subject and is stored in a second database that is in communication with said consent management system, wherein said at least a portion of the subject data record is controlled data that is associated with said at least one of said plurality of control levels based on reference data associated with said controlled data;

receiving, by said electronic circuit, a consent request from a requesting operator requesting access to said controlled data, wherein said consent request includes reference data associated with the requesting operator;

storing in said control database, by said electronic circuit, a control level data set comprising said at least one of said plurality of control levels associated with said controlled data in said subject data record; and

interactively sharing, by said electronic circuit, with the requesting operator, at least a portion of said control level data set based on said one or more control levels associated with the subject, said one or more control levels associated with said controlled data, and said one or more control levels associated with the requesting operator, wherein determination whether to grant the requesting operator access to the controlled data is based on said at least a portion of said control level data set that is interactively shared.

2. The method according to claim 1, wherein said controlled data is associated with a one or more owner or originator, and wherein said owner has authority from the subject to possess and interactively share said controlled data, and has authority from the subject to interactively share said control level data set associated with said controlled data, and wherein the originator is an owner that creates at least a portion of said controlled data.

3. The method according to claim 2, wherein said owner or said subject manually associates said one or more of said plurality of control levels with said controlled data.

4. The method according to claim 2, wherein said consent management system automatically associating one or more of said plurality of control levels with said controlled data contained in said subject data record by:

evaluating an information type of said controlled data contained in said subject data record; and

associating said one or more of said plurality of control levels with said controlled data based on said information type of said controlled data.

5. The method according to claim 1, further comprising determining, by said electronic circuit, whether the requesting operator is allowed access to at least a portion of said controlled data based on at least one of said plurality of control levels associated with said controlled data.

6. The method according to claim 1, wherein said plurality of control levels define the extent to which said controlled data is shared by the sharing operator of said computer-based consent management system.

7. The method according to claim 6, wherein said at least a portion of said control level data set is used by the requesting operator to determine whether the requesting operator is allowed access to at least a portion of said controlled data based on at least one of said plurality of control levels associated with said controlled data.

8. The method according to claim 1, further comprising:

receiving, by said electronic circuit, an update to said control level data set, wherein said update changes one or more of said plurality of control levels; and

storing, by said electronic circuit, an updated control level data set in said first database based on said update.

9. The method according to claim 8, further comprising transmitting a revocation of rights to the requesting operator based on said updated control level such that the requesting operator no longer possesses consent to access said controlled data.

10. The method according to claim 1, wherein said controlled data describes an object.

11. The method according to claim 10, wherein said object and said subject are the same.

12. The method according to claim 11, wherein said object and said subject are different.

13. A federated computer-based consent management system for allowing controlled data to be interactively shared among operators of said computer-based consent management system, the system comprising:

a first database, in communication with a first computer based consent management system operated by a sharing operator, for storing a control data record, wherein said control data record contains a plurality of control levels, and wherein each of said plurality of control levels defines a distinct set of controls that are applied to controlled data and said plurality of control levels are applied based reference data associated with a subject;

a second database, in communication with first computer based consent management system, for storing a subject data record associated with the subject, wherein at least a portion of the subject data record is controlled data that is associated with at least one of said plurality of control levels based reference data associated with said controlled data; and

a processor in communication with a computer readable medium that contains program instructions which, when executed, instruct the processor to;

process a consent request, received from a requesting operator operating a second computer based consent management system, requesting access to said controlled data, wherein said consent request includes reference data associated with the requesting operator;

store, in said first database, a control level data set comprising said at least one of said plurality of control levels associated with said controlled data in said subject data record; and

interactively share, with the requesting operator, at least a portion of said control level data set based on said one or more control levels associated with the subject, said one or more control levels associated with said controlled data, and said one or more control levels associated with the requesting operator, wherein a determination whether to grant the requesting operator access to the controlled data is based on said at least a portion of said control level data set that is interactively shared.

14. A system according to claim 13, wherein said federated computer-based consent management system comprises a plurality of computer-based consent management systems, and wherein the program instructions, when executed, further instruct the processor to:

store, in said first database, a control level data set for each of a plurality of requesting operators operating said plurality of federated computer-based consent management systems; and

interactively share said control level data set with each of the plurality of requesting operators based on at least a portion of said control level data set associated each requesting operator.

15. The system according to claim 13, wherein said controlled data is associated with a one or more owner or originator, and wherein said owner has authority from the subject to possess and interactively share said controlled data, and has authority from the subject to interactively share said control level data set associated with said controlled data, and wherein the originator is an owner that creates at least a portion of said controlled data.

16. The system according to claim 15, wherein said owner or said subject manually associates said one or more of said plurality of control levels with said controlled data.

17. The system according to claim 15, wherein said federated computer-based consent management system automatically associating one or more of said plurality of control levels with said controlled data contained in said subject data record by:

evaluating an information type of said controlled data contained in said subject data record; and

associating said one or more of said plurality of control levels with said controlled data based on said information type of said controlled data.

18. The system according to claim 13, wherein said program instructions, when executed, further instruct the processor to determine whether the requesting operator is allowed access to at least a portion of said controlled data based on at least one of said plurality of control levels associated with said controlled data.

19. The system according to claim 13, wherein said plurality of control levels define the extent to which said controlled data is shared by the sharing operator of said federated computer-based consent management system.

20. The system according to claim 19, wherein said at least a portion of said control level data set is used by the requesting operator to determine whether the requesting operator is allowed access to at least a portion of said controlled data based on at least one of said plurality of control levels associated with said controlled data.

21. The method according to claim 13, wherein said program instructions, when executed, further instruct the processor to store an updated control level data set in said first database based on an update, received from the sharing operator, which changes one or more of said plurality of control levels.

22. The method according to claim 21, wherein said program instructions, when executed, further instruct the processor to transmit a revocation of rights to the requesting operator based on said updated control level such that the requesting operator no longer possesses consent to access said controlled data.