Method of customizing a browsing experience on a world-wide-web site

• US 6,734,886 B1
• Filed: 12/21/1999
• Issued: 05/11/2004
• Est. Priority Date: 12/21/1999
• Status: Expired due to Term

• Current Assignee: PersonalPath Systems, Inc. (Abbott Laboratories Incorporated)
• Original Assignee: PersonalPath Systems, Inc. (Abbott Laboratories Incorporated)
• Inventors: Levy, David, Hagan, Thomas
• Primary Examiner(s): Nguyen, Cao (Kevin)
• Application Number:
  US09/469,102
• Time in Patent Office: 1,603 Days
• Field of Search: 345/763, 345/764, 345/765, 345/854, 345/853, 707/100, 707/103, 707/104
• US Class Current: 715/853
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

In accordance with a first aspect of the present invention, a method of customizing the browsing experience of a user of a Web site comprised of a plurality of Web pages is provided. Each Web page is indexed using at least one coding system. A user record for each user is maintained on the Web site, which contains personal information of the user coded in accordance with said coding system. The user'"'"'s browsing experience on the site may thus be readily customized using the user'"'"'s personal information via code comparison. In accordance with a second aspect of the present invention, a method of ensuring the privacy of the user'"'"'s personal information is provided through use of a unique Universal Anonymous Identifier (UAI) assigned to each user by a third party registration authority.

Claims

1. A method of customizing a search by a user of a database, wherein the database is comprised of de-identified personal data of users, said method comprising the steps of:

associating a first identifier with identifier data of the user and associating a second identifier with personal data of the user, such that the second identifier is an encrypted version of the first identifier, de-identified personal data being stored in said database indexed by said second identifier;

providing an index of said database site in which each page is indexed using at least one coding system;

providing personal information of said user coded in accordance with said at least one coding system;

comparing said coded personal information to said index; and

suggesting data having codes which match said coded personal information to said user for browsing.

2. The method according to claim 1 wherein said database is indexed using a plurality of coding systems and wherein said personal information is coded in accordance with each of said coding systems.

3. The method according to claim 1 wherein said database is a healthcare-related database.

4. The method according to claim 3 wherein said at least one coding system is the ICD-9-CM coding system.

5. The method according to claim 3 wherein said at least one coding system is the CPT-4 coding system.

6. The method according to claim 3 wherein said at least one coding system is the NDC coding system.

7. The method according to claim 3 wherein said at least one coding system is the HCPS J-code coding system.

8. A method of transferring personal information of a plurality of users from a first database in which said personal information is identifiable with particular users to a second database in which said personal information is de-identified, said method comprising the steps of:

transferring personal information of said users from said first database to said second database;

transferring identifiable personal information from said first database to a third database;

generating on said third database an anonymous ID for each user;

transferring encrypted anonymous IDs from said third database to said second database; and

indexing on said second database said de-identified personal information of said users by encrypted anonymous ID.

9. The method according to claim 8 including the additional step of uploading said indexed de-identified personal information from said third database to a data warehouse.

10. The method according to claim 9 including the additional step of uploading said indexed de-identified personal information from said data warehouse to a World-Wide-Web (WWW) site.

11. The method according to claim 8 wherein said first database belongs to a health plan and wherein said users are members of said health plan.

12. The method according to claim 8 wherein said second database belongs to an operator of a WWW site.

13. The method according to claim 8 wherein said third database belongs to a registration authority.

14. The method according to claim 8 wherein said de-identified personal information is medical claims data wherein said identifiable personal information is eligibility data.

15. A data retrieval from data storage method using de-identified data based on multiple user identifiers comprising the steps of:

associating a first identifier with first data associated with a user and associating a second identifier with second data associated with the user;

receiving information enabling the user to be identified;

obtaining said first identifier via a method dependent on said received information;

obtaining said second identifier via a method dependent on said first identifier;

using the second identifier to identify the second data associated with the user;

using the second data to obtain user relevant information;

authenticating the user; and

providing the user relevant information to the user in response to queries by the user after the user has been authenticated.

16. The data retrieval from data storage method recited in claim 15, wherein the second identifier can be determined using information available to an authorized party.

17. The data retrieval from data storage method recited in claim 16, wherein the information available to an authorized party is secret information and the second identifier is an encrypted version of the first identifier.

18. The data retrieval from data storage method recited in claim 17, wherein the de-identified data has the property that it can be re-identified by the authorized party, further comprising the step of re-identifying the data.

20. The database system for providing information to registered users recited in claim 16, further comprising a database server receiving the indexed de-identified personal data from the second database and providing a login for users and authenticating a user based on a user'"'"'s assigned anonymous identifier and responding to queries from authenticated users to generate search results to queries which are customized based on the user'"'"'s personal data while maintaining user privacy and confidentiality in the user'"'"'s personal data.

21. The database system for providing information to registered users recited in claim 20, wherein the first database is maintained by a health plan, the second database is maintained by an operator of the database server system, and the third database is maintained by a registration authority, and wherein user personal data is medical data in a medical code.

22. The database system for providing information to registered users recited in claim 21, wherein the customization of -search results for a user is based on a user'"'"'s medical data.

19. A database system for providing information to registered users comprising:

a first database of personal data and identifying data of users, a unique surrogate ID being assigned to each user;

a second database receiving de-identified personal data of the users from the first database and maintaining the de-identified personal data of users indexed by surrogate ID; and

a third database receiving the surrogate IDs and user identifying data from the first database and assigning a unique anonymous identifier to each user, the third database generating and sending a surrogate ID/encrypted anonymous identifier map to the second database, and the second database correlating surrogate ID s which it receives from the first database with their corresponding encrypted anonymous identifiers and storing, de-identified personal data indexed by encrypted anonymous identifiers.