Systems and methods for protecting private information

• US 6,269,349 B1
• Filed: 11/03/1999
• Issued: 07/31/2001
• Est. Priority Date: 09/21/1999
• Status: Expired due to Term

• Current Assignee: LF Capital Partners, LLC
• Original Assignee: A6B2 Incorporated
• Inventors: Beldock, James G., Beldock, Donald T., Aieta, Mario A.
• Primary Examiner(s): Swann, Tod R
• Assistant Examiner(s): Smithers, Matthew
• Application Number:
  US09/433,013
• Time in Patent Office: 636 Days
• Field of Search: 705/80, 705/54, 705/1, 707/9, 707/103
• US Class Current: 705/80
• CPC Class Codes: G06Q 50/188 Electronic negotiation
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/126 the source of the received data

Abstract

A system protects private information provided in an exchange between a client and a server. The system receives the private information from the client and determines whether it is of a type to which a bond may be assigned. The bond provides an indemnity to the client for misuse of the private information. The system then assigns a bond to the private information, if it is determined to be of the type to which a bond may be assigned, and provides the private information to the server under bond.

Claims

1. A method for protecting private information provided in an exchange between a client and a server, comprising:

receiving private information from the client;

determining whether the private information is of a type to which a bond may be assigned, the bond providing an indemnity to the client for use of the private information that is unauthorized by the client;

assigning a bond to the private information determined to be of the type to which a bond may be assigned; and

providing the private information to the server under bond.

2. The method of claim 1, further comprising:

encrypting the private information; and

sending the encrypted private information to the client.

3. The method of claim 2, wherein the sending includes:

storing the encrypted private information as a cookie at the client.

4. The method of claim 1, wherein the determining includes:

determining that a type of the private information corresponds to at least one category of information, and

identifying an amount of the indemnity to associate with the private information based on the determined category.

5. The method of claim 4, wherein the assigning includes:

associating the identified amount of indemnity with the private information based on the determined category.

6. The method of claim 1, wherein the receiving includes:

receiving a request from the server for private information of the client to complete the exchange, and

obtaining the private information from the client.

7. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving authorization from the client to provide the intended response to the server.

8. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving modifications to the intended response from the client.

9. The method of claim 6, wherein the obtaining includes:

generating an intended response to the request received from the server,

providing the intended response to the client, and

receiving additions to the intended response from the client.

10. The method of claim 9, wherein the obtaining further includes:

assessing the bondability of the additions, and

informing the client of a result of the assessment.

11. The method of claim 1, wherein the providing includes:

encrypting the private information, and

sending the encrypted information to the server.

12. The method of claim 1, wherein the receiving includes:

transmitting an executable object to the client,

activating the object at the client, and

receiving the private information at the object.

13. The method of claim 1, wherein the receiving includes:

activating an executable object at the client, and

receiving the private information at the object.

14. The method of claim 13, wherein the receiving further includes:

sending the private information to an external object to determine the bondability of the private information.

15. The method of claim 13, wherein the determining includes:

assessing, by the object, the bondability of the private information.

16. A system for protecting private information provided in an exchange between a client and a server, comprising:

means for receiving private information from the client;

means for determining whether the private information is of a type to which a bond may be assigned, the bond providing an indemnity to the client for use of the private information that is unauthorized by the client;

means for assigning a bond to the private information determined to be of the type to which a bond may be assigned; and

means for providing the private information to the server under bond.

17. A system for protecting private information provided in an exchange between a client and a server, comprising:

a memory that stores data; and

a processor, connected to the memory, that receives private information from the client, determines whether the private information is of a type to which a bond may be assigned, the bond providing an indemnity to the client for use of the private information that is unauthorized by the client, assigns a bond to the private information determined to be of the type to which a bond may be assigned, and provides the private information to the server under bond.

18. The system of claim 17, wherein the processor is further configured to encrypt the private information and send the encrypted private information to the client.

19. The system of claim 17, wherein when determining whether the private information is of a type to which a bond may be assigned, the processor is further configured to determine that a type of the private information corresponds to at least one category of information, and identify an amount of the indemnity to associate with the private information based on the determined category.

20. The system of claim 19, wherein when assigning a bond to the private information, the processor is further configured to associate the identified amount of indemnity with the private information based on the determined category.

21. The system of claim 17, wherein when receiving the private information, the processor is further configured to receive a request from the server for private information of the client to complete the exchange, and obtain the private information from the client.

22. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive authorization from the client to provide the intended response to the server.

23. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive modifications to the intended response from the client.

24. The system of claim 21, wherein when obtaining the private information, the processor is further configured to generate an intended response to the request received from the server, provide the intended response to the client, and receive additions to the intended response from the client.

25. The system of claim 24, wherein when obtaining the private information, the processor is further configured to assess the bondability of the additions, and inform the client of a result of the assessment.

26. The system of claim 17, wherein when providing the private information, the processor is further configured to encrypt the private information and send the encrypted information to the server.

27. The system of claim 17, wherein when receiving the private information, the processor is further configured to transmit an executable object to the client and receive the private information from the object after the object is activated at the client.

28. The system of claim 17, wherein the private information includes at least one of a purchase history and preference data.

29. The system of claim 17, wherein the private information includes at least one of a social security number, credit card data, bank account data, a personal identification number, a password, a name, an address, a telephone number, and an email address.

30. The system of claim 17, wherein the memory is configured to further store a data structure including at least one of a social security number, credit card data, bank account data, a personal identification number, a password, a name, an address, a telephone number, an email address, a purchase history, and preference data corresponding to the client.

31. In a network connecting a plurality of client entities to a plurality of server entities, a bonding agent, connected to the client entities and server entities, comprising:

a memory that stores instructions for determining whether private information received from one of the client entities is of a type to which a bond may be assigned, the bond providing an indemnity to a user of the one client entity for use of the private information that is unauthorized by the user, assigning a bond to the private information determined to be of the type to which a bond may be assigned, and providing the private information to one of the server entities under bond as part of an information exchange; and

a processor that executes the instructions in the memory.

32. The bonding agent of claim 31, wherein the memory is further configured to store instructions for encrypting the private information and sending the encrypted private information to the one client entity.

33. The bonding agent of claim 31, wherein the memory is further configured to store instructions for determining that a type of the private information corresponds to at least one category of information, and identifying an amount of the indemnity to associate with the private information based on the determined category.

34. The bonding agent of claim 33, wherein the memory is further configured to store instructions for associating the identified amount of the indemnity with the private information based on the determined category.

35. The bonding agent of claim 31, wherein the memory is further configured to store instructions for obtaining the private information from the one client entity in response to a request received from the one server entity for private information of the user to complete the exchange.

36. The bonding agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, and providing the intended response to the one server entity when authorized by the one client entity.

37. The bonding agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, and assigning a bond to modifications to the intended response received from the one client entity.

38. The bonding agent of claim 35, wherein the memory is further configured to store instructions for generating an intended response to the request received from the one server entity, providing the intended response to the one client entity, assessing the bondability of additions to the intended response received from the one client entity, and informing the one client entity of a result of the assessment.

39. The bonding agent of claim 31, wherein the memory is further configured to store instructions for encrypting the private information and sending the encrypted information to the one server entity.

40. An executable object stored in a computer, the computer communicating with a client entity and a plurality of server entities, the executable object comprising:

instructions for obtaining private information from a user associated with the client entity for use in an information exchange with one of the server entities;

instructions for sending the private information to an external object to obtain a bondability assessment regarding the private information, the bondability assessment indicating whether an indemnity will be paid to the user if the private information is used in a manner unauthorized by the user;

instructions for obtaining the bondability assessment from the external object;

and instructions for providing the private information to the one server entity under bond.

41. The executable object of claim 40, further comprising:

instructions for encrypting the private information; and

instructions for storing the encrypted private information as an object on the client entity.

42. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity; and

instructions for providing the intended response to the one server entity when authorized by the client entity.

43. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity; and

instructions for assigning a bond to modifications to the intended response received from the client entity.

44. The executable object of claim 40, further comprising:

instructions for generating an intended response to a request received from the one server entity for private information of the user;

instructions for providing the intended response to the client entity;

instructions for obtaining a bondability assessment for additions to the private information from the external object; and

instructions for informing the client entity of a result of the assessment.

45. The executable object of claim 40, further comprising:

instructions for encrypting the private information; and

instructions for sending the encrypted information to the one server entity.

46. A computer-readable medium storing instructions for causing a processor to perform a method, the method comprising:

determining whether private information received from a client object is of a type to which a bond may be assigned, the bond providing an indemnity to a user associated with the client object for use of the private information that is unauthorized by the user;

assigning a bond to the private information determined to be of the type to which a bond may be assigned; and

providing the private information to a server object under bond as part of an information exchange.

47. A computer-readable medium storing instructions for causing a processor to perform a method, the method comprising:

obtaining private information from a client object for use in an exchange with a server object;

sending the private information to a bonding object to obtain a bondability assessment regarding the private information, the bondability assessment indicating whether an indemnity will be paid to a user associated with the client object if the private information is used in a manner unauthorized by the user; and

providing the private information to the server object under bond.

48. An executable object stored in a computer, the computer communicating with a client entity and at least one server entity, the executable object comprising:

instructions for obtaining private information from a user associated with the client entity for use in an information exchange with the server entity;

instructions for assessing a bondability of the private information, the bondability assessment indicating whether an indemnity will be paid to the user if the private information is used in a manner unauthorized by the user;

and instructions for providing the private information to the server entity under bond.

49. A system for providing private information of a client to a server during an information exchange, comprising:

a memory that stores data; and

a processor, connected to the memory, that receives a request for private information of the client from the server, generates an intended response to the request, the intended response including the requested private information under bond, the bond providing an indemnity to the client for use of the private information in a manner unauthorized by the client, provides the intended response to the client, receives authorization from the client to send the intended response to the server, and sends the intended response to the server in response to the received authorization.

50. A method for providing privacy in a transaction, comprising:

providing at least one of information, services, and products for browsing and purchase by consumers during a transaction;

requesting private information from the consumers prior to completing the transaction;

receiving the requested information under bond, the bond providing an indemnity to the consumers for use of the requested information in a manner unauthorized by the consumers; and

completing the transaction.