Method, system, and apparatus for dynamic data-driven privacy policy protection and data sharing

• US 7,401,233 B2
• Filed: 06/24/2003
• Issued: 07/15/2008
• Est. Priority Date: 06/24/2003
• Status: Active Grant

• Current Assignee: International Business Machines Corporation
• Original Assignee: International Business Machines Corporation
• Inventors: Duri, Sastry S., Liu, Xuan, Singh, Moninder, Moskowitz, Paul A., Salmi, George V., Elliott, Jeffrey G., Tang, Jung-Mu
• Primary Examiner(s): Moazzami; Nasser
• Assistant Examiner(s): REZA, MOHAMMAD W
• Application Number:
  US10/603,025
• Publication Number:
  US 20040267410A1
• Time in Patent Office: 1,848 Days
• Field of Search: 726 1- 10, 713/193, 713/166, 713/170, 370/337, 705/14
• US Class Current: 713/193
• CPC Class Codes: G06F 21/6245 Protecting personal data, e.g. for financial or medical purposes
• CPC Class Codes: H04L 63/10 for controlling access to devices or network resources
• CPC Class Codes: H04L 63/20 for managing network security; network security policies in general filtering policies H04L63/0227

Abstract

A method of sharing telematics data for a vehicle with service providers can include receiving the telematics data for the vehicle, where the telematics data dynamically changes over time, and comparing the telematics data with a privacy policy associated with the vehicle. The privacy policy can specify rules for selectively releasing items of the telematics data to one or more service providers. Data items of the telematics data can be selectively provided to the service providers according to the comparing step.

Claims

1. A method of sharing with one or more service providers telematics data collected from a plurality of vehicles, the method comprising:

receiving the telematics data from the plurality of vehicles, wherein the received telematics data dynamically changes over time;

comparing the telematics data received from each one of said vehicles with a privacy policy associated with said each one of said vehicles, wherein the privacy policy specifies privacy policy rules for selectively releasing items of the received telematics data to said one or more service providers;

selectively providing items of the telematics data to the one or more service providers based on the comparing step, according to which an item of telematics data is provided only if a privacy policy rule is satisfied; and

specifying at least one conflict-resolution rule for resolving a conflict between two or more privacy policy rules, wherein if a first privacy policy rule dictates release of an item of telematics data and a second privacy policy rule dictates not releasing the item of telematics data, then the item of telematics data is provided to the one or more service providers only if the at least one conflict-resolution rule assigns a higher priority to the first privacy policy rule.

2. The method of claim 1, further comprising:

receiving updated telematics data from at least one of the plurality of vehicles;

comparing the updated telematics data with the privacy policy associated with the at least one of the plurality of vehicles; and

selectively providing items of the telematics data to the one or more service providers according to said step of comparing the updated telematics data.

3. The method of claim 1, further comprising:

receiving a request for information from at least one of the service providers prior to said comparing step; and

determining a privacy policy associated with said each one of said vehicles associated with the at least one of the requesting service providers.

4. The method of claim 1, wherein the telematics data includes at least one of vehicle diagnostic information, vehicle location information, temporal information, vehicle trajectory information, vehicle acceleration and deceleration information, and vehicle occupant information.

5. The method of claim 4, wherein the privacy policy rules include at least one of temporal rules, location rules, and vehicle diagnostic rules for comparing the telematics data.

6. A method of sharing with one or more service providers telematics data collected from a plurality of vehicles, the method comprising:

receiving the telematics data from the plurality of vehicles, wherein the telematics data dynamically changes over time;

receiving a telematics event from at least one of the vehicles;

comparing the telematics event from said at least one of the vehicles with a privacy policy associated with said at least one of the vehicles, wherein the privacy policy specifies privacy policy rules for selectively releasing items of the telematics data to said one or more service providers according to the telematics event;

selectively providing items of the telematics data to the one or more service providers based on the comparing step, according to which an item of telematics data is provided only if a privacy policy rule is satisfied; and

specifying at least one conflict-resolution rule for resolving a conflict between two or more privacy policy rules, wherein if a first privacy policy rule dictates release of an item of telematics data and a second privacy policy rule dictates not releasing the item of telematics data, then the item of telematics data is provided to the one or more service providers only if the at least one conflict-resolution rule assigns a higher priority to the first privacy policy rule.

7. The method of claim 6, wherein the telematics data includes at least one of vehicle diagnostic information, vehicle location information, temporal information, vehicle trajectory information, vehicle acceleration and deceleration information, and vehicle occupant information.

8. The method of claim 6, wherein the privacy policy rules include at least one of temporal rules, geographic rules, and vehicle diagnostic rules, said comparing step further comprising comparing the telematics data with the privacy policy.