SYSTEM AND METHOD FOR USE IN A SECURE PERSONAL DATA MARKETPLACE

• US 20170221081A1
• Filed: 09/23/2015
• Published: 08/03/2017
• Est. Priority Date: 09/30/2014
• Status: Abandoned Application

• Current Assignee: PCMS Holdings Incorporated (InterDigital, Inc.)
• Original Assignee: PCMS Holdings Incorporated (InterDigital, Inc.)
• Inventors: Kylnp, Markku, Bck, Asta I., Ollikainen, Ville J., Vainikainen, Sari Eliisa, Launonen, Raimo J., Sdergrd, Caj Gustav, Mensonen, Aino J.
• Application Number:
  US15/515,507
• Publication Number:
  US 20170221081A1
• Time in Patent Office: Days
• CPC Class Codes: G06F 16/122 using management policies backup systems G06F11/1446; file migration policies for HSM systems G06F16/185
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 30/0201 Market modelling; Market analysis; Collecting market data
• CPC Class Codes: G06Q 30/06 Buying, selling or leasing transactions
• CPC Class Codes: G06Q 30/0615 Anonymizing
• CPC Class Codes: H04L 63/14 for detecting or protecting against malicious traffic
• CPC Class Codes: H04L 63/1466 Active attacks involving interception, injection, modification, spoofing of data unit addresses, e.g. hijacking, packet injection or TCP sequence number attacks
• CPC Class Codes: H04L 63/30 for supporting lawful interception, monitoring or retaining of communications or communication related information circuit switched telephony call monitoring H04M3/2281

Abstract

Systems and methods for use in a secure personal data marketplace are disclosed. In accordance with one method, a request for processed user data from a requesting party is received at an electronic marketplace. The request for the processed user data is published from the electronic marketplace to a plurality of responding agents. The plurality of responding agents determine whether one or more of the users will be a user participant. The responding agents send the user information for the user participants to the electronic marketplace, where the user information is processed in a trusted environment to generate the processed user data requested by the requesting party. The processed user data is sent from the electronic marketplace to the requesting party, and the user information and processed user data is deleted from the electronic marketplace once the processed user data has been sent to the requesting party.

Claims

1-20. -20. (canceled)

21. A method performed by an electronic marketplace, the method comprising:

publishing a request for user data;

in response to the published request, receiving respective user data from a plurality of responding agents, each of the responding agents having an associated anonymity threshold value;

from among the responding agents, determining a set of confirmed participants such that an anonymity value for processed data associated with the set of confirmed participants exceeds the associated anonymity threshold values of all responding agents included in the set of confirmed participants;

generating processed user data based only on the set of confirmed participants; and

sending the processed data to a requesting party.

22. The method of claim 21, wherein the electronic marketplace includes a database storing the respective anonymity threshold value for each of a plurality of responding agents, and wherein determining the set of confirmed participants comprises:

comparing the stored anonymity threshold value for each of a plurality of responding agents with the anonymity value for processed data associated with the set of confirmed participants.

23. The method of claim 21, wherein the anonymity value is a metric selected from the group consisting of k-anonymity, l-diversity, and t-closeness.

24. The method of claim 21, wherein determining the set of confirmed participants comprises:

identifying a first set of participants from among the responding agents;

determining an anonymity value for processed data associated with the first set of participants;

in response to a determination that the anonymity value exceeds the anonymity threshold values of all responding agents included in the first set of participants, including the first set of participants in the set of confirmed participants.

25. The method of claim 24, further comprising iteratively:

identifying an additional set of participants from among the responding agents having anonymity threshold values below they anonymity value;

including the additional set of participants in the set of confirmed participants to generate an updated set of confirmed participants; and

generating an updated anonymity value based on the updated set of confirmed participants.

26. The method of claim 25, wherein the additional participants are added until a set minimum number of participants are included in the set of confirmed participants.

27. The method of claim 25, wherein the additional participants are added until a set maximum number of participants are included in the set of confirmed participants.

28. The method of claim 21, wherein determining the set of confirmed participants comprises:

setting a test level of anonymity;

identifying a test set of participants from among the responding agents having anonymity thresholds below the test level of anonymity;

calculating an anonymity value for processed data associated with the test set of participants;

comparing the calculated anonymity value to the test level of anonymity; and

using the test set of participants as the set of confirmed participants only if the calculated anonymity value is greater than the test level of anonymity.

29. The method of claim 28, wherein the test set of participants is used as the set of confirmed participants only if the number of participants in the test set is at least a set minimum number.

30. The method of claim 28, wherein the test set of participants is used as the set of confirmed participants only if the number of participants in the test set is no greater than a set maximum number.

31. A system comprising an electronic marketplace server configured to perform functions comprising:

publishing a request for user data;

in response to the published request, receiving respective user data from a plurality of responding agents, each of the responding agents having an associated anonymity threshold value;

from among the responding agents, determining a set of confirmed participants such that an anonymity value for processed data associated with the set of confirmed participants exceeds the associated anonymity threshold values of all responding agents included in the set of confirmed participants;

generating processed user data based only on the set of confirmed participants; and

sending the processed user data to a requesting party.

32. The system of claim 31, wherein the electronic marketplace server further includes a database storing the respective anonymity threshold value for each of a plurality of responding agents, and wherein the marketplace server is further operative to determine the set of confirmed participants by comparing the stored anonymity threshold value for each of a plurality of responding agents with the anonymity value for processed data associated with the set of confirmed participants.