Online repository for personal information

• US 6,845,448 B1
• Filed: 01/07/2000
• Issued: 01/18/2005
• Est. Priority Date: 01/07/2000
• Status: Expired due to Term

• Current Assignee: Web 2.0 Technologies LLC
• Original Assignee: Pennar Software Corporation
• Inventors: Chaganti, Sitapathi Rao, Chaganti, Damayanti, Chaganti, Naren
• Primary Examiner(s): Darrow, Justin T.
• Application Number:
  US09/478,796
• Time in Patent Office: 1,838 Days
• Field of Search: 713165-167, 713/170, 713200-202, 707 6- 9, 707/200, 705/1, 705/3, 705/2, 709/223, 709/225
• US Class Current: 713/166
• CPC Class Codes: G06F 21/6218 to a system of files or objects, e.g. local or distributed file system or database
• CPC Class Codes: G16H 10/60 for patient-specific data, e.g. for electronic patient records
• CPC Class Codes: G16Z 99/00 Subject matter not provided for in other main groups of this subclass
• CPC Class Codes: H04L 63/0428 wherein the data content is protected, e.g. by encrypting or encapsulating the payload
• CPC Class Codes: H04L 63/08 for authentication of entities cryptographic mechanisms or cryptographic arrangements for entity authentication H04L9/32
• CPC Class Codes: H04L 63/105 Multiple levels of security
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]
• CPC Class Codes: H04L 9/40 Network security protocols
• CPC Class Codes: Y10S 707/99939 Privileged access

Abstract

Method and system for gathering, storing personal information on a server computer and releasing such information to authorized requesters. Several types of information are stored for release to different entities with appropriate authorization. Any modifications or updates are automatically notified to any authorized requesters. The requester optionally provides information about to whom and where to notify changes or updates. Such change or update notification is made by sending a notification to an electronic mailbox. A frequent unauthorized requester of information is tagged as “junk” requester, to whom no further information will be released.

Claims

1. A method for automatically disbursing a first party'"'"'s personal information to a second party authorized by the first party by transmitting said first party'"'"'s personal information from a server computer operated by a service provider, said server computer coupled to a database, the method comprising the steps of:

establishing an account for the first party with the server computer;

assigning an identifier to the first party;

entering the first party'"'"'s personal information, said first party'"'"'s personal information comprising at least one of a plurality of information objects;

assigning, by the first party, at least one of a plurality of security levels to each information object at any granularity, thereby enabling access to individually selected portions of the first party'"'"'s personal information by individual receiving parties;

storing in the database the first party identifier, the information object and the security level assigned to the information object;

receiving a request, said request comprising at least the first party identifier;

in response to the request, selecting a first portion of the first party'"'"'s personal information objects that could be transmitted to a second party;

retrieving from the database the selected first portion of personal information objects;

securely transmitting the retrieved first portion of personal information objects to the second party;

obtaining a second party identifier;

if the second party is not authorized to receive the information, recording the second party identifier; and

rejecting the second party'"'"'s request for information.

2. The method of claim 1, further comprising the steps of:

designating the second party as a junk requester if the second party presents a predetermined number of requests that are not authorized; and

generating an alarm indication.

3. A method for automatically disbursing a first party'"'"'s personal information to a second party authorized by the first party by transmitting said first party'"'"'s personal information from a server computer operated by a service provider, said server computer coupled to a database, the method comprising the steps of:

establishing an account for the first party with the server computer;

assigning an identifier to the first party;

entering the first party'"'"'s personal information, said first party'"'"'s personal information comprising at least one of a plurality of information objects;

assigning, by the first party, at least one of a plurality of security levels to each information object at any granularity, thereby enabling access to individually selected portions of the first party'"'"'s personal information by individual receiving parties;

storing in the database the first party identifier, the information object and the security level assigned to the information object;

receiving a request, said request comprising at least the first party identifier;

in response to the request, selecting a first portion of the first party'"'"'s personal information objects that could be transmitted to a second party;

retrieving from the database the selected first portion of personal information objects, securely transmitting the retrieved first portion of personal information objects to the second party;

generating an authorization key;

providing the authorization key to the second party; and

encoding the authorization key with at least one of a plurality of criteria, generating an authorization key;

providing the authorization key to the second party;

wherein the at least one of a plurality of criteria includes a criterion to indicate the number of times the authorization key can be used by the second party to obtain access.