Method of customizing a user's browsing experience on a World-Wide-Web site

• US 7,428,706 B2
• Filed: 10/22/2003
• Issued: 09/23/2008
• Est. Priority Date: 12/21/1999
• Status: Expired due to Term

• Current Assignee: PersonalPath Systems, Inc. (Abbott Laboratories Incorporated)
• Original Assignee: PersonalPath Systems, Inc. (Abbott Laboratories Incorporated)
• Inventors: Levy, David, Hagan, Thomas
• Primary Examiner(s): NGUYEN, CAO H
• Application Number:
  US10/689,988
• Publication Number:
  US 20040088355A1
• Time in Patent Office: 1,798 Days
• Field of Search: 715736-738, 715853-854, 715744-745, 715/764, 715/800, 715/792, 715/798, 715/759, 715740-743, 726 1- 26, 707/1, 707/102
• US Class Current: 715/738
• CPC Class Codes: G06F 21/6254 by anonymising data, e.g. decorrelating personal data from the owner's identification
• CPC Class Codes: G06Q 10/10 Office automation; Time management
• CPC Class Codes: G06Q 20/4014 Identity check for transactions
• CPC Class Codes: G06Q 40/08 Insurance
• CPC Class Codes: H04L 63/0823 using certificates cryptographic mechanisms or cryptographic arrangements for entity authentication involving certificates H04L9/3263
• CPC Class Codes: H04L 67/02 based on web technology, e.g. hypertext transfer protocol [HTTP]
• CPC Class Codes: H04L 67/306 User profiles
• CPC Class Codes: H04L 69/329 in the application layer [OSI layer 7]

Abstract

In accordance with a first aspect of the present invention, a method of customizing the browsing experience of a user of a Web site comprised of a plurality of Web pages is provided. Each Web page is indexed using at least one coding system. A user record for each user is maintained on the Web site, which contains personal information of the user coded in accordance with said coding system. The user'"'"'s browsing experience on the site may thus be readily customized using the user'"'"'s personal information via code comparison. In accordance with a second aspect of the present invention, a method of ensuring the privacy of the user'"'"'s personal information is provided through use of a unique Universal Anonymous Identifier (UAI) assigned to each user by a third party registration authority.

Claims

1. A method of transferring personal information, including medical information, of a plurality of users from a first database in which said personal information is identifiable with particular users to a second database associated with a web server in which said personal information is de-identified, said method comprising the steps:

uploading to said second database associated with said web server de-identified personal information, including medical information, of said users from said first database;

uploading to said second database from a third database associated with a registration authority server anonymous IDs for each of said users; and

indexing said de-identified personal information, including medical information, of said users in said second database by anonymous ID without providing indexing to said first database.

2. A method of authenticating an anonymous user of a World-Wide-Web (WWW) site residing on a web server, said user requiring a web ID and a password to log on to said WWW site, said method comprising the steps:

verifying the true identity of said anonymous user on a registration authority server;

creating said web ID on said web server, said web server including de-identified personal information including medical information of said user; and

creating said password on a certificate authority server;

wherein said registration authority server, said web server, and said certificate authority server are operated separately from each other to preserve anonymity of said user, whereby the only party which knows the true identity, web ID and password of the user is the user.

3. The method according to claim 2 wherein on subsequent log ins to the WWW site by said user said password is authenticated by said certificate authority server and said Web ID is authenticated by said Web server.